I have a server that hosts Tomcat for apps and Apache2 for it's frontend. They communicate to each other through ajp protocol over mod_moxy and proxy_ajp modules.
Am I really safe using apache virtualhosts in this form:
... ProxyRequests Off <Proxy *> Order deny,allow Deny from all Allow from 192.168.0.100 </Proxy> ProxyPass / ajp://srv.local:8009/ ProxyPassReverse / http://srv.local ...
0.100 is the server's IP address and behind port 8009 is the Tomcat AJP connector. I want Apache to cut any proxy requests from outside and allow only itself to use it for communicating with Tomcat.