port: port tag configuration

The port tags configure <http> ports, addresses, cluster-ports and custom protocol TCP ports.

• See the index for a list of all the tags.
• See <cluster> tag configuration
• See <server> tag configuration

<accept-listen-backlog> configures operating system TCP listen queue size for the port.

<accept-thread-min> configures the maximum number of threads listening for new connections on this port.

<accept-thread-min> configures the minimum number of threads listening for new connections on this port.

The <address> defines the IP interface for a port. A value of '*' binds to all ports. Because the <address> is specific to a server, it should only be defined in a <server> tag, not a <server-default>.

<resin xmlns="http://caucho.com/ns/resin">
  <cluster id="web-tier">
    <server id="web-a" address="192.168.1.1" port="6800">
      <http address="10.0.1.1" port="80"/>
    </server>

    <server id="web-b" address="192.168.1.2" port="6800">
      <http address="10.0.1.2" port="80"/>
    </server>

    ...
  </cluster>
</resin>

<ca-certificate-file> configures the path to a CA certificate file for intermediate CA support.

<ca-certificate-path> configures the path to a CA certificate directory for intermediate CA support.

<ca-revocation-file> configures the path to a list of revoked CA certificates.

<ca-revocation-path> configures the path to a list of revoked CA certificates.

<certificate-file> configures the path to the server's SSL certificate.

<certificate-chain-file> configures the path to the server's SSL certificate for OpenSSL.

<certificate-key-file> configures the path to the server's SSL private key certificate for OpenSSL.

<cipher-suite> configures the path to the server's SSL cryptographic ciphers.

<cluster-port> configures the cluster and load balancing socket, for load balancing, distributed sessions, and distributed management.

When configuring Resin in a load-balanced cluster, each Resin instance will have its own <srun> configuration, which Resin uses for distributed session management and for the load balancing itself.

When configuring multiple JVMs, each <srun> will have a unique <server-id> which allows the -server command-line to select which ports the server should listen to.

The class that corresponds to <srun> is com.caucho.server.cluster.ClusterPort

<connection-max> configures the maximum number of concurrent connections on this port.

<http> configures a HTTP or HTTPS port listening for HTTP requests.

When configuring multiple JVMs, each <http> will have a unique <server-id> which allows the -server command-line to select which ports the server should listen to.

The virtual-host attribute overrides the browser's Host directive, specifying the explicit host and port for request.getServerName() and getServerPort(). It is not used in most virtual host configurations. Only IP-based virtual hosts which wish to ignore the browser's Host will use @virtual-host.

<jsse-ssl> configures the port to use JSSE for SSL support.

The SSL section of the Security documentation provides a comprehensive overview of SSL.

<keepalive-max> configures the maximum number of keepalives on this port.

<openssl> configures the port to use OpenSSL for SSL support (requires Resin Professional). OpenSSL is a fast C implementation of SSL security used by Apache. Resin's configuration is OpenSSL follows Apache's configuration, so any documentation on installing SSL certificates can use documentation for Apache.

The SSL section of the Security documentation provides a comprehensive overview of SSL.

<password> configures the SSL private key certificate password.

The <port> defines the TCP port the HTTP or protocol should bind to.

<resin xmlns="http://caucho.com/ns/resin">
  <cluster id="web-tier">
    <server id="web-a" address="192.168.1.1" port="6800">
      <http address="10.0.1.1" port="80"/>
      <http address="192.168.1.1" port="8080"/>
    </server>

    ...
  </cluster>
</resin>

<protocol> configures custom socket protocols using Resin's thread and connection management.

The custom protocol will extend from com.caucho.server.port.Protocol.

<resin xmlns="http://caucho.com/ns/resin">
<cluster id="web-tier">

  <server id="a">
    <protocol address="localhost" port="8888">
      <type>example.Magic8BallProtocol</type>
    </port>
  </server>

</cluster>
</resin>

<protocol> configures the SSL allowed protocols.

<session-cache> configures the SSL session cache.

<session-cache> configures the SSL session cache timeout.

<socket-timeout> overrides the socket timeout from the <server>.

Sets the tcp-no-delay parameter.

<unclean-shutdown> configures the OpenSSL unclean shutdown on connection close.

<verify-client> sets the client certificate configuration. If the certificate is available, it will be put in the javax.servlet.request.X509Certificate request attribute.

  X509Certificate []certs = (X509Certificate [])
       request.getAttribute("javax.servlet.request.X509Certificate");

<verify-depth> configures the OpenSSL client verification depth.