On Thu, Sep 15, 2011 at 14:54, André Warnier <a...@ice-sa.com> wrote:
[...]
>
> One difficulty with implementing an Apache httpd-like scheme is that, in
> httpd, the order of the allow/deny plays a big role, and preserving the
> order is generally more difficult in XML.
>

Which is why there is "Order" ;)

> But maybe just this : the "localhost" case is so frequent, that maybe it
> could just be a separate attribute in the Valve, like :
> localhostAllow="true/false" or even localhost="allow/deny"
> and internally match any form of localhost.
> That may allow for some optimisation.  I'm sure the impact would be tiny,
> but since this is code that gets invoked at just every request and generally
> quite early, it may be significant.
>

I was rather thinking about a completely new valve, allowing to
specify CIDR ranges, subdomains, etc etc. It is certainly doable.

-- 
Francis Galiegue
ONE2TEAM
Ingénieur système
Mob : +33 (0) 683 877 875
Tel : +33 (0) 178 945 552
f...@one2team.com
40 avenue Raymond Poincaré
75116 Paris

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to