1. ✅tomcat虚拟主机1.1. 修改配置文件Host namewww.zhubl.xyz appBasewebapps unpackWARstrue autoDeploytrue Valve classNameorg.apache.catalina.valves.AccessLogValve directorylogs prefixwww.zhubl.xyz_access_log suffix.txt pattern%h %l %u %t quot;%rquot; %s %b / /Host2. ✅tomcat多实例服务器资源过剩如何解决降低配置使用虚拟化创建虚拟机服务的多实例二进制安装编译安装容器运行docker多实例在同1台机器运行多个相同的服务充分利用资源1.解压二进制tomcat包 tar xf apache-tomcat-9.0.106.tar.gz 2.将tomcat目录移动到/app/tools/目录下 mv apache-tomcat-9.0.106 /app/tools/tomcat_8081 3.修改tomcat监听端口 sed -i s#8080#8081#g /app/tools/tomcat_8081/conf/server.xml sed -i s#8005#8006#g /app/tools/tomcat_8081/conf/server.xml 4.启动tomcat /app/tools/tomcat_8081/bin/startup.sh 5.检查端口 ss -lntup | grep java3. ✅tomcat远程监控监控软件zabbix需要获取到jvm数据信息做监控tomcat(war),jar需要tomcat或jar包开启远程监控功能 jmxremote4. ✅tomcat部署https4.1. 将ssl证书存放到/app/tools/tomcat/cert/keys/目录下/app/tools/tomcat/cert/keys/zhubl.xyz.pfx4.2. 修改tomcat配置文件开启8443端口keystoreFile/app/tools/tomcat/cert/zhubl.xyz.pfxkeystorePass证书密码 密码文件的内容写到这里Connector port8443 protocolHTTP/1.1 SSLEnabledtrue schemehttps securetrue keystoreFile/app/tools/tomcat/cert/keys/zhubl.xyz.pfx keystoreTypePKCS12 keystorePass证书密码 clientAuthfalse SSLProtocolTLSv1.1TLSv1.2TLSv1.3 ciphersTLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA256/4.3. 访问测试https://zhubl.xyz.pfx4.4. tomcat跳转配置HTTP请求自动跳转HTTPS修改web.xml文件security-constraint web-resource-collection web-resource-nameSSL/web-resource-name url-pattern/*/url-pattern /web-resource-collection user-data-constraint transport-guaranteeCONFIDENTIAL/transport-guarantee /user-data-constraint /security-constraint