From 6e6802597788fd5c843bd222ea2499e8c8c4099d Mon Sep 17 00:00:00 2001 From: Radoslav Husar Date: Wed, 16 Jul 2025 14:29:03 +0200 Subject: [PATCH] MODCLUSTER-858 Remove usage of 'unsafe' ports from documentation --- .../asciidoc/developer/cluster_listener.adoc | 5 ++- .../developer/management_protocol.adoc | 19 ++++++----- docs/src/main/asciidoc/faq.adoc | 33 +++++++++---------- docs/src/main/asciidoc/native.adoc | 14 ++++---- docs/src/main/asciidoc/quickstart.adoc | 6 ++-- docs/src/main/asciidoc/security.adoc | 4 +-- 6 files changed, 40 insertions(+), 41 deletions(-) diff --git a/docs/src/main/asciidoc/developer/cluster_listener.adoc b/docs/src/main/asciidoc/developer/cluster_listener.adoc index 33500c98..ec46b586 100644 --- a/docs/src/main/asciidoc/developer/cluster_listener.adoc +++ b/docs/src/main/asciidoc/developer/cluster_listener.adoc @@ -11,10 +11,9 @@ To enable it just add in server.xml: The following parameters are supported: -* proxyList: list of proxy frond-end that will use us as backend that is a coma -separed list of host:port example: +* proxyList: list of proxy frond-end that will use us as backend that is a comma-separated list of host:port example: - - `ProxyList="localhost:6666,neo:6666"localhost:7666"` + - `ProxyList="localhost:8090,localhost:8091"` * proxyURL: URL prefix to send with the commands default is no prefix diff --git a/docs/src/main/asciidoc/developer/management_protocol.adoc b/docs/src/main/asciidoc/developer/management_protocol.adoc index 51d002a3..c759ab77 100644 --- a/docs/src/main/asciidoc/developer/management_protocol.adoc +++ b/docs/src/main/asciidoc/developer/management_protocol.adoc @@ -71,7 +71,7 @@ You can send the command using `curl` executing following: [source] ---- -curl -XDISABLE-APP -d "JVMRoute=node1" -d "Context=/myapp" -d "Alias=demo" http://localhost:6666 +curl -XDISABLE-APP -d "JVMRoute=node1" -d "Context=/myapp" -d "Alias=demo" http://localhost:8090 ---- == Message Types @@ -161,18 +161,19 @@ Example: [source] ---- -Node: [0],Name: spare,Balancer: mycluster,LBGroup: ,Host: localhost,Port: 8888,Type: ws,Flushpackets: Off,Flushwait: 10,Ping: 10,Smax: -1,Ttl: 60,Elected: 0,Read: 0,Transfered: 0,Connected: 0,Load: 0 -Node: [1],Name: test,Balancer: mycluster,LBGroup: ,Host: localhost,Port: 8889,Type: ws,Flushpackets: Off,Flushwait: 10,Ping: 10,Smax: -1,Ttl: 60,Elected: 0,Read: 0,Transfered: 0,Connected: 0,Load: -1 +Node: [0],Name: spare,Balancer: mycluster,LBGroup: ,Host: localhost,Port: 8090,Type: ws,Flushpackets: Off,Flushwait: 10,Ping: 10,Smax: -1,Ttl: 60,Elected: 0,Read: 0,Transfered: 0,Connected: 0,Load: 0 +Node: [1],Name: test,Balancer: mycluster,LBGroup: ,Host: localhost,Port: 8091,Type: ws,Flushpackets: Off,Flushwait: 10,Ping: 10,Smax: -1,Ttl: 60,Elected: 0,Read: 0,Transfered: 0,Connected: 0,Load: -1 Vhost: [1:1:0], Alias: localhost Context: [1:1:0], Context: test, Status: STOPPED ---- -TODO: Desribe the XML format. +// TODO: Describe the XML format. === DUMP -This message doesn't expect parameters, but you can supply an `Accept` header specifying the context type of the response. If `"text/xml"` -is specified, the response will contain an XML. Otherwise plain text response is sent. +This message doesn't expect parameters, but you can supply an `Accept` header specifying the context type of the response. +If `"text/xml"` is specified, the response will contain an XML. +Otherwise, plain text response is sent. The plain text format has a following structure: @@ -222,13 +223,13 @@ Example: [source] ---- balancer: [0] Name: mycluster Sticky: 1 [JSESSIONID]/[jsessionid] remove: 0 force: 1 Timeout: 0 maxAttempts: 1 -node: [0:0],Balancer: mycluster,JVMRoute: spare,LBGroup: [],Host: localhost,Port: 8888,Type: ws,flushpackets: 0,flushwait: 10,ping: 10,smax: -1,ttl: 60,timeout: 0 -node: [1:1],Balancer: mycluster,JVMRoute: test,LBGroup: [],Host: localhost,Port: 8889,Type: ws,flushpackets: 0,flushwait: 10,ping: 10,smax: -1,ttl: 60,timeout: 0 +node: [0:0],Balancer: mycluster,JVMRoute: spare,LBGroup: [],Host: localhost,Port: 8090,Type: ws,flushpackets: 0,flushwait: 10,ping: 10,smax: -1,ttl: 60,timeout: 0 +node: [1:1],Balancer: mycluster,JVMRoute: test,LBGroup: [],Host: localhost,Port: 8091,Type: ws,flushpackets: 0,flushwait: 10,ping: 10,smax: -1,ttl: 60,timeout: 0 host: 0 [localhost] vhost: 1 node: 1 context: 0 [test] vhost: 1 node: 1 status: 3 ---- -TODO: Describe the XML output. +// TODO: Describe the XML output. === STATUS diff --git a/docs/src/main/asciidoc/faq.adoc b/docs/src/main/asciidoc/faq.adoc index e8caf87d..51bd6788 100644 --- a/docs/src/main/asciidoc/faq.adoc +++ b/docs/src/main/asciidoc/faq.adoc @@ -17,7 +17,7 @@ Date: Wed, 08 Apr 2009 12:26:32 GMT Sequence: 16 Digest: f2d5f806a53effa6c67973d2ddcdd233 Server: 1b60092e-76f3-49fd-9f99-a51c69c89e2d -X-Manager-Address: 127.0.0.1:6666 +X-Manager-Address: 127.0.0.1:8090 X-Manager-Url: /bla X-Manager-Protocol: http X-Manager-Host: 10.33.144.3 @@ -45,7 +45,7 @@ property and set advertise to false, for example: [source,xml] ---- -10.33.144.3:6666,10.33.144.1:6666 +10.33.144.1:8090,10.33.144.2:8090 false ---- @@ -66,7 +66,7 @@ to ---- ---- @@ -110,7 +110,7 @@ Date: Mon, 28 Jun 2010 07:30:31 GMT Sequence: 1 Digest: df8a4321fa99e5098174634f2fe2f87c Server: 1403c3be-837a-4e76-85b1-9dfe5ddb4378 -X-Manager-Address: test.example.com:6666 +X-Manager-Address: test.example.com:8090 X-Manager-Url: /1403c3be-837a-4e76-85b1-9dfe5ddb4378 X-Manager-Protocol: http X-Manager-Host: test.example.com @@ -129,18 +129,18 @@ X-Manager-Host: test.example.com [source] ---- -INFO [DefaultMCMPHandler] IO error sending command INFO to proxy jfcpc/10.33.144.3:8888 +INFO [DefaultMCMPHandler] IO error sending command INFO to proxy localhost/10.33.144.3:8090 ---- it means that the worker was unable to *contact the balancer*. Keep in mind that the communication is *bidirectional*. You can use telnet hostname/address port to check that it is OK, e.g.: -[source,xml] +[source] ---- -[jfclere@jfcpc docs]$ telnet 10.33.144.3 8888 +[user@host ~]$ telnet 10.33.144.3 8090 Trying 10.33.144.3… -Connected to jfcpc. +Connected to host. Escape character is '^]'. GET /

It works!

Connection closed by foreign host. @@ -149,9 +149,9 @@ GET / Check that the address and port are the expected ones you may use ServerAdvertise directive in you mod_cluster httpd configuration: -[source,xml] +[source] ---- -ServerAdvertise On http://localhost:6666 +ServerAdvertise On http://localhost:8090 ---- === Error in error_log @@ -238,25 +238,24 @@ In Web subsystem: ---- -== Chrome does not display /mod_cluster-manager page +== Google Chrome does not display `/mod_cluster-manager` page -When using Chrome with mod_cluster-manager, the page is not displayed -and the following error is displayed instead: +When using ports such as 6666 for the virtual host and using Google Chrome with mod_cluster-manager, +the page is not displayed and the following error is displayed instead: [source] ---- Error 312 (net::ERR_UNSAFE_PORT): Unknown error. ---- -you can change the port of the VirtualHost to 7777 or any value chrome accepts or add: +you can change the port of the VirtualHost to 8090 or any value chrome that is not considered unsafe by the browser, +or start parameters for Google Chrome: [source] ---- - –explicitly-allowed-ports=6666 +-–explicitly-allowed-ports=6666 ---- -to the start parameters of Chrome. - == How do I use mod_cluster with SELinux? mod_cluster needs to open port and create shared memory and files, therefore some permissions have to be added, diff --git a/docs/src/main/asciidoc/native.adoc b/docs/src/main/asciidoc/native.adoc index ca2b6c3d..8d0539ed 100644 --- a/docs/src/main/asciidoc/native.adoc +++ b/docs/src/main/asciidoc/native.adoc @@ -388,7 +388,7 @@ the VirtualHost) === AdvertiseGroup -AdvertiseGroup IP:port: That is the multicast address to use (something like 232.0.0.2:8888 for example). +AdvertiseGroup IP:port: That is the multicast address to use (something like 232.0.0.2:8090 for example). IP should correspond to AdvertiseGroupAddress and port to AdvertisePort in the JBoss AS/JBossWeb/Tomcat configuration. Note that if JBoss AS is used and the -u startup switch is included in the AS startup command, the default AdvertiseGroupAddress is the value passed via the -u. If port is missing the default port will be used: 23364. @@ -397,15 +397,15 @@ is the value passed via the -u. If port is missing the default port will be used === AdvertiseFrequency -AdvertiseFrequency seconds[.miliseconds]: Time between the multicast -messages advertising the IP and port. +AdvertiseFrequency seconds[.milliseconds]: Time between the multicast messages advertising the IP and port. **Default:** 10 === AdvertiseSecurityKey -AdvertiseSecurityKey value: key string used to verify advertisements checksums. If configured on either side the verification -is required. Both sides must use the same security key. +AdvertiseSecurityKey value: key string used to verify advertisements checksums. +If configured on either side the verification is required. +Both sides must use the same security key. **Default:** No default value. @@ -443,9 +443,9 @@ LoadModule advertise_module modules/mod_advertise.so LoadModule watchdog_module modules/mod_watchdog.so - Listen 6666 + Listen 8090 ServerName localhost - + # Where your worker nodes connect from diff --git a/docs/src/main/asciidoc/quickstart.adoc b/docs/src/main/asciidoc/quickstart.adoc index 8940c04a..3bba145c 100644 --- a/docs/src/main/asciidoc/quickstart.adoc +++ b/docs/src/main/asciidoc/quickstart.adoc @@ -102,9 +102,9 @@ LoadModule watchdog_module modules/mod_watchdog.so LoadModule slotmem_shm_module modules/mod_slotmem_shm.so - Listen 127.0.0.1:6666 + Listen 127.0.0.1:8090 ManagerBalancerName mycluster - + Require ip 127.0.0 @@ -176,7 +176,7 @@ Edit the `$CATALINA_HOME/conf/server.xml` file, adding the following next to the [source,xml] ---- - + ---- === Start httpd diff --git a/docs/src/main/asciidoc/security.adoc b/docs/src/main/asciidoc/security.adoc index 5e83ade6..4bdcef15 100644 --- a/docs/src/main/asciidoc/security.adoc +++ b/docs/src/main/asciidoc/security.adoc @@ -24,9 +24,9 @@ See in one example how easy the configuration is: [source] ---- -Listen 6666 +Listen 8090 - + SSLEngine on SSLCipherSuite AES128-SHA:ALL:!ADH:!LOW:!MD5:!SSLV2:!NULL SSLCertificateFile conf/server.crt