Page Comparison

Install Tomcat

• Install Tomcat on Linux
• Install Tomcat on Windows

Configure Tomcat for HTTPS

You are responsible for ensuring all PhixFlow communication is secure.

• Either use HTTP communication behind a secure firewall.
• Or you must configure Tomcat to use HTTPS communication with the PhixFlow webapp. You must also disable HTTP access to the webapp.

Linux: Install Pound Reverse Proxy

Windows: Microsoft blog post about IIS as a reverse proxy

If you want to make your web server visible on the default ports (e.g. on Linux, http: 80, https: 443) we recommend that you use a reverse proxy to terminate the HTTPS session and to forward web requests using HTTP to the Tomcat server. The proxy and Tomcat servers must run on a private network or on the same server and the Tomcat server must not be directly accessible to normal users. In this configuration, the reverse proxy runs as root, which allows it:

• to use privileged ports (up to port 1000)
• to forward requests to the web server, which runs:
  • as a non-privileged user (normally 'tomcat')
  • on non-privileged ports (above 1000).

Options for reverse proxy servers are:

• On Linux servers, Pound 
• On Windows servers, IIS.

If you do not already have the PhixFlow package to install, you can download it from our support FTP site. Please email support@phixflow.com.

Log on to the webapp host and unpack the release package.

Create a database user and tables. Populate the tables with initial configuration data and set the customer name. See also the details in Database URLs.

Create a keystore for the database credentials and their aliases. Configure the following files to use the keystore:

• phixflow-datasource.xml
• phixflow-secret.xml
• an environment variable (recommended).

Check that the application is running by starting the client and logging in with the username startup and password: Startup.