Course objectives
References and resources

Organizations: W3C and IETF
Resource naming conventions (URI, URL, URN)
http protocol versions (http v1.1, SPDY, http v2, http via quick)
Main type codes (20x, 30x, 40x, 50x)
The https protocol: TLS / SSLv3

Presentation of the main players
Operating modes
Securing web services: NIDS, WAF, DPI

Presentation of the technology
Use of « virtual hosts »
Redirection and URL Rewriting
Access controls : ACL
External management of rights and options (.htaccess)

Practical workshop : Installation and configuration of Apache. Creation of several « virtual hosts » incorporating access controls.

The context of use
Presentation of the technology
Reminders on servlets, JSP

Practical workshop : deployment of a JAVA application.

Presentation of the technology
Use of « servers blocks »
Redirection and URL Rewriting
The reverse proxy
Load balancing and failover
Presentation of naxsi

Practical workshop : Configuration of several « server blocks » by activating the reverse proxy mode to expose the Tomcat application.