Search code examples
apachetomcatrestriction

Restrict access to specific URL (Apache Tomcat)

How can I restrict access to a specific URL (it is a Tomcat Application Server)? e.g. http://localhost:8081/application cannot be accessed by an user except a specified IP (that is the calling service)

Solution

  • Quote:

    The Remote Address filter, org.apache.catalina.valves.RemoteAddrValve, allows you to compare the IP address of the requesting client against one or more regular expressions to either allow or prevent the request from continuing based on the results of this comparison. A Remote Address filter can be associated with a Tomcat Engine, Host, or Context container. org.apache.catalina.valves.RemoteAddrValve.

    http://www.oxxus.net/tutorials/tomcat/tomcat-valve.htm

    So, you'd need something along the lines of 

    <Valve className="org.apache.catalina.valves.RemoteAddrValve" allow="<your-ip-here>"/>

    For possible values, see

    http://tomcat.apache.org/tomcat-6.0-doc/config/valve.html#Remote_Address_Filter

    You should be able to set this in the WEB-INF/web.xml for your application, see

    http://oreilly.com/java/archive/tomcat.html