Disable Management Server Port 8080

Products

• CA Release Automation - Release Operations Center (Nolio)
• CA Release Automation - DataManagement Server (Nolio)

Issue/Introduction

The management server and execution servers use http over port 8080 by default. While configuring the management server and execution server to use SSL/TLS over port 8443 you might want to disable port 8080 so that tomcat isn't listening for connections and more vulnerable. 

Is disabling port 8080 on the management and execution servers supported? 

Environment

CA Release Automation (Nolio) - 6.x

Resolution

Yes. Ports can be disabled by commenting out the following Connector element in Tomcat's server.xml file: Connector port="8080"

Please note that when doing this it is expected that:

• The whole Connector that uses port 8080 is commented out. It often has line separated attributes including compression="on" and server="Unknown" and that should be part of the comment. 
• The environment needs to be configured to use SSL/TLS over port 8443. There is nothing needed to enable this port. It is enabled by default. However, some changes are necessary to make active-mq on the NES communicate using SSL/TLS. More details can be found in Secure Communications .

Additional Information