{"id":1732,"date":"2018-07-11T15:04:31","date_gmt":"2018-07-11T06:04:31","guid":{"rendered":"http:\/\/blog.moramcnt.com\/?p=1732"},"modified":"2018-07-19T18:39:12","modified_gmt":"2018-07-19T09:39:12","slug":"tomcat%ec%84%9c%eb%b2%84%eb%a5%bc-root%ea%b0%80-%ec%95%84%eb%8b%8c-%ec%9d%bc%eb%b0%98%ec%82%ac%ec%9a%a9%ec%9e%90%eb%a1%9c-80%ed%8f%ac%ed%8a%b8%eb%a5%bc-%ec%84%9c%eb%b9%84%ec%8a%a4-%ed%95%98%eb%8a%94","status":"publish","type":"post","link":"http:\/\/blog.moramcnt.com\/?p=1732","title":{"rendered":"Tomcat\uc11c\ubc84\ub97c Root\uac00 \uc544\ub2cc \uc77c\ubc18\uc0ac\uc6a9\uc790\ub85c 80\ud3ec\ud2b8\ub97c \uc11c\ube44\uc2a4 \ud558\ub294 \uacbd\uc6b0"},"content":{"rendered":"
\n

<\/a>\ubb38\uc81c\uc810<\/span><\/u><\/b><\/b><\/p>\n

Linux(<\/span>\ud639\uc740<\/span> Unix)<\/span>\uc5d0\uc11c\ub294<\/span> 1024<\/span>\ubc88 \uc774\ud558\uc758 \ud3ec\ud2b8\uac00 \ubcf4\uc548\uc0c1\uc758 \uc774\uc720\ub85c<\/span> root<\/span>\uad8c\ud55c\uc744 \uac00\uc9c0\uace0 \uc788\ub294 \ub85c\uc138\uc2a4\ub9cc\uc774 \ud3ec\ud2b8\ub97c \uc120\uc810\ud560 \uc218 \uc788\ub2e4<\/span>.(root reserved ports)\u00a0root<\/span>\uacc4\uc815\uc774 \uc544\ub2cc \uc77c\ubc18\uacc4\uc815\uc73c\ub85c<\/span> Tomcat<\/span>\uc744 \uc11c\ube44\uc2a4 \ud560 \ub54c<\/span>, <\/span>\uc815\uc0c1\uc801\uc73c\ub85c<\/span> Tomcat<\/span>\uc758 \ub9ac\uc2a4\ub108<\/span>(Listener)<\/span>\uac00 \ub3d9\uc791\ud558\uc9c0 \uc54a\uc74c\uc744<\/span> TOMCAT<\/span>\uc758<\/span> LOG(logs\/catalina.out)<\/span>\ub97c <\/span>
\n\ud1b5\ud558\uc5ec \ud655\uc778 \ud560 \uc218 \uc788\ub2e4<\/span>. <\/span><\/span><\/p>\n

\u00a0<\/span><\/p>\n

2009. 12. 15 <\/span>\uc624\ud6c4<\/span> 4:14:31 org.apache.coyote.http11.Http11Protocol init<\/span>
\n\uc2ec\uac01<\/span>: Error initializing endpoint<\/span>
\njava.net.BindException:\u00a0<\/span>Permission<\/span>\u00a0<\/span>denied<\/span><<\/span>null<\/span>>:<\/span>80<\/span><\/span><\/p>\n

\u00a0<\/span><\/p>\n

\ub530\ub77c\uc11c \uc77c\ubc18\uacc4\uc815\uc73c\ub85c<\/span> Tomcat<\/span>\uc744<\/span>\u00a0<\/span>80<\/span>\ubc88 \ud3ec\ud2b8<\/span>(HTTP\u00a0<\/span>\uae30\ubcf8\ud3ec\ud2b8<\/span>)<\/span>\uc5d0\uc11c \uc11c\ube44\uc2a4 \ud558\ub824 \ud55c\ub2e4\uba74<\/span>,\u00a0Tomcat<\/span>\uc758<\/span>\u00a0HTTP\u00a0Connector Port<\/span>\ub97c<\/span> 1024<\/span>\uc774\uc0c1\uc758 \ud3ec\ud2b8\ubc88\ud638\ub85c \uc9c0\uc815\ud574\uc900 \ub4a4<\/span>,\u00a0<\/span>80<\/span>\ud3ec\ud2b8\ub85c\uc758 \ubaa8\ub4e0 \uc778\ubc14\uc6b4\ub529\uc744<\/span> Tomcat<\/span>\uc758<\/span>\u00a0HTTP\u00a0Connector Port<\/span>\ub85c \ub9ac\ub2e4\uc774\ub809\ud2b8 \ud574\uc8fc\uc5b4\uc57c\ud55c\ub2e4<\/span>.\u00a0<\/span>\uc544\ub798\ub294<\/span> iptables <\/span>\uba85\ub839\uc744 \uc774\uc6a9\ud55c \uac04\ub2e8\ud55c \uc608\uc81c\uc774\ub2e4<\/span>.(<\/span>\ubc18\ub4dc\uc2dc<\/span> root<\/span>\uad8c\ud55c\uc73c\ub85c \uc218\ud589\ub418\uc5b4\uc57c \ud55c\ub2e4<\/span>.)<\/span><\/span><\/p>\n

\u00a0<\/span><\/p>\n

\uc6b0\uc120<\/span> 8080<\/span>\ud3ec\ud2b8\uac00 \ub9ac\uc2a8\uc744 \ud558\uace0\uc788\ub294\uc9c0 \ud655\uc778\ud55c\ub2e4<\/span>.<\/span><\/span><\/p>\n

# netstat -ntl<\/span><\/strong><\/pre>\n
The output will look something like<\/span><\/span><\/p>\n
Active Internet connections (only servers)\r\nProto Recv-Q Send-Q Local Address               Foreign Address             State\r\ntcp        0      0 127.0.0.1:25                0.0.0.0:*                   LISTEN\r\ntcp        0      0 0.0.0.0:22                  0.0.0.0:*                   LISTEN\r\ntcp        0      0 ::ffff:127.0.0.1:8005       :::*                        LISTEN\r\ntcp        0      0 :::8009                     :::*                        LISTEN\r\ntcp        0      0 :::8080                     :::*                        LISTEN\r\ntcp        0      0 :::22                       :::* <\/span><\/pre>\n
<\/a>\uc608\uc81c<\/span><\/u><\/b><\/b><\/p>\n
TOMCAT \uc11c\ubc84\uac00 \uad6c\ub3d9\ub418\ub294 \ud638\uc2a4\ud2b8\uc758<\/span> IP : 211.110.33.86 \ub610\ub294 localhost<\/span><\/strong>
\nTOMCAT \uc11c\ubc84\uc758<\/span>\u00a0HTTP\u00a0Connector Port :\u00a08080<\/span><\/span><\/p>\n
iptables -t nat -I PREROUTING -p tcp --dport 80 -j REDIRECT --to-ports 8080\r\niptables -t nat -I OUTPUT -p tcp --dport 80 -j REDIRECT --to-ports 8080<\/b><\/span><\/span><\/pre>\n
\uc704\uc758 \uc608\uc81c\ub294 \ud604\uc7ac \uc11c\ubc84<\/span>(211.110.33.86)<\/span>\uc758<\/span>\u00a0<\/span>8080<\/span>\ud3ec\ud2b8\uc5d0 \ub300\ud55c \ubaa8\ub4e0 \uc778\ubc14\uc6b4\ub529\uc744<\/span>\u00a0<\/span>80<\/span>\u00a0<\/span>\ud3ec\ud2b8\ub85c \ub9ac\ub2e4\uc774\ub809\ud2b8<\/span>(REDIRECT)<\/span>\ud558\ub294 \uba85\ub839\uc774\ub2e4<\/span>.<\/span><\/span><\/p>\n
\u00a0<\/span><\/p>\n
\ub610\ub294 \ub2e4\uc74c\uacfc \uac19\uc774 \uba85\ub839\uc744 \uc785\ub825\ud55c\ub2e4<\/span>.<\/span><\/p>\n
# iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080<\/span><\/span><\/strong><\/pre>\n
\u00a0<\/span><\/p>\n
Run the folloing command to verify that redirect is working fine<\/span><\/p>\n
# iptables -t nat -L<\/span><\/strong><\/pre>\n
The output will look something like<\/span><\/p>\n
Chain PREROUTING (policy ACCEPT)\r\ntarget     prot opt source               destination\r\nREDIRECT   tcp  --  anywhere             anywhere            tcp dpt:http redir ports 8080<\/span>\r\n\r\nChain OUTPUT (policy ACCEPT)\r\ntarget     prot opt source               destination\r\n\r\nChain POSTROUTING (policy ACCEPT)\r\ntarget     prot opt source               destination<\/span><\/span><\/pre>\n
\u00a0<\/span>Run the following command to remove the routing<\/span><\/p>\n
# iptables -t nat -D PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080<\/span><\/strong><\/pre>\n
\u00a0Remember, when you are modifying your running configuration of iptables, you will still need to save your changes in order for it to persist on reboot. Be sure to test your configuration before saving it with “service iptables save<\/strong><\/span><\/code>” so that you don’t lock yourself out<\/span><\/p>\n
\u00a0<\/span><\/p>\n
<\/a>\uc0dd\uac01\ud574\ubcf4\uc544\uc57c\ud560 \ubb38\uc81c<\/span><\/u><\/b><\/b><\/p>\n
\n
root\uad8c\ud55c\uc73c\ub85c<\/span> TOMCAT\uacfc \uac19\uc740<\/span> WAS\ub97c \uad6c\ub3d9\ud558\uc600\uc744\ub54c \ubc1c\uc0dd \ud560 \uc218 \uc788\ub294 \ubb38\uc81c\uc810\uc740<\/span>?
\nWEB SERVER\uc5c6\uc774<\/span> TOMCAT\uacfc \uac19\uc740<\/span> WAS\ub9cc\uc73c\ub85c \uc11c\ube44\uc2a4\ud558\uc600\uc744\ub54c \ubc1c\uc0dd \ud560 \uc218 \uc788\ub294 \ubb38\uc81c\uc810\uc740<\/span>?
\nSSL(https)\uc758 \uacbd\uc6b0<\/span> 443\ubc88 \ud3ec\ud2b8\ub97c \ud574\ub2f9 \ud504\ub85c\ud1a0\ucf5c\uc758 \uae30\ubcf8 \ud3ec\ud2b8\ub85c \uc0ac\uc6a9\ud558\ub294\ub370<\/span>, SSL\ub3c4 \uc774\uc640\uac19\uc740 \ucc98\ub9ac\ub97c \ud574\uc8fc\uc5b4\uc57c\ud560\uae4c<\/span>?<\/span><\/p>\n
\n\n\n\n
<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n