How can I restrict access to some web-app deployed in Glassfish from certain IPs ? Are there any internal access control in Glassfish or I need to proxy it with external nginx or Apache ?
How can I restrict access to some web-app deployed in Glassfish from certain IPs ? Are there any internal access control in Glassfish or I need to proxy it with external nginx or Apache ?
Yes, if you are using a Virtual Server in glassfish then you can use allowRemoteAddress , denyRemoteAddress, allowRemoteHost and denyRemoteHost properties to deny/accept connections from certain IP's.
in Glassfish DAS go to configurations -> http-service-> Virtual Servers and then configure your properties there (under a non cluster glassfish the Virtual Servers are under Server configuration)