Anubis + Shibboleth/AJP?

[wshahn]

Hello!

My team is looking at Anubis to block aggressive bot traffic and crawlers to our domain. However, we use Shibboleth, as well as AJP (Apache JServ Protocol) for request handling; we're curious whether this would function with Anubis.

The pipeline would look like the following.

User -> HTTPS (Apache/Shibboleth) -> Anubis -> AJP

Would this be possible with Anubis? We didn't see AJP mentioned anywhere, so we wanted to reach out and ask!

[Xe]

Hi, I've never heard of this before. Do you have any links to upstream documentation or a setup guide on how to start from scratch on Ubuntu/CentOS/Rocky Linux and get an AJP app set up?

[donsizemore]

@Xe you are wonderful! In particular we're looking at https://guides.dataverse.org/en/6.5/installation/shibboleth.html — it's the AJP_ Shibboleth prefix coupled with the ajp:// protocol in the proxy we're wondering about. It may "just work" - we were lazily sniffing for recommendations but will start testing.

[donsizemore]

@Xe update: we haven't implemented Shibboleth yet (waiting on InCommon Federation publication) but so far Anubis seems to work well over AJP! Instead of assigning a DocumentRoot we used the following for the last listener:

<VirtualHost *:3000>
  ServerAdmin <e-mail>
  ServerName <FQDN>
  ErrorLog /var/log/httpd/error.log
  CustomLog /var/log/httpd/access.log combined
  
  ProxyPass / ajp://localhost:8009/
  ProxyPassReverse / ajp://localhost:8009/
</VirtualHost>