On Thu, Sep 15, 2011 at 14:54, André Warnier <a...@ice-sa.com> wrote: [...] > > One difficulty with implementing an Apache httpd-like scheme is that, in > httpd, the order of the allow/deny plays a big role, and preserving the > order is generally more difficult in XML. >
Which is why there is "Order" ;) > But maybe just this : the "localhost" case is so frequent, that maybe it > could just be a separate attribute in the Valve, like : > localhostAllow="true/false" or even localhost="allow/deny" > and internally match any form of localhost. > That may allow for some optimisation. I'm sure the impact would be tiny, > but since this is code that gets invoked at just every request and generally > quite early, it may be significant. > I was rather thinking about a completely new valve, allowing to specify CIDR ranges, subdomains, etc etc. It is certainly doable. -- Francis Galiegue ONE2TEAM Ingénieur système Mob : +33 (0) 683 877 875 Tel : +33 (0) 178 945 552 f...@one2team.com 40 avenue Raymond Poincaré 75116 Paris --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org