๐ก๐ด๐ถ๐ป๐ ๐ช๐ถ๐๐ต ๐๐ผ๐น๐ฑ๐๐๐๐ถ๐ผ๐ป: ๐ง๐ต๐ฒ ๐ฅ๐ถ๐ด๐ต๐ ๐ช๐ฎ๐
You want SSL and load balancing for your ColdFusion app. Put Nginx in front of it.
Many guides give wrong advice about AJP. Nginx does not support AJP in the standard build. Adobe says the AJP module is not there by default.
ColdFusion uses AJP with IIS and Apache. Do not use AJP with Nginx. Use an HTTP reverse proxy. Connect Nginx to the Tomcat HTTP port 8500.
Third party modules allow AJP. They are risky. The Ghostcat vulnerability (CVE-2020-1938) makes HTTP proxying safer.
This guide covers:
- AJP reality.
- HTTP reverse proxy load balancing.
- SSL termination.
Optional learning community: https://t.me/GyaanSetuAi