Changing Tomcat web server settings

To configure DSE Search security, you can make changes in the Tomcat web server.xml file to change the IP address for client connections to DSE Search using the HTTP and Solr Admin interfaces, and other changes, including specifying SSL ciphers and ports.

To configure DSE Search security, you can make changes in the Tomcat web server.xml file to change the IP address for client connections to DSE Search using the HTTP and Solr Admin interfaces, and other changes, including specifying SSL ciphers and ports.
The location of the cassandra.yaml file depends on the type of installation:
Package installations /etc/dse/cassandra/cassandra.yaml
Tarball installations install_location/resources/cassandra/conf/cassandra.yaml
The default location of the Tomcat server.xml file depends on the type of installation:
Installer-Services and Package installations /usr/share/dse/resources/tomcat/conf/server.xml
Installer-No Services and Tarball installations install_location/resources/tomcat/conf/server.xml

Procedure

Several configuration changes in the Tomcat server.xml file:

  1. You can change the IP address for client connections to DSE Search.
    The default IP address that the HTTP and Solr Admin interface uses to access DSE Search is defined with rpc_address in the cassandra.yaml file.
    • The default rpc_address value localhost enables Tomcat to listen on the localhost only.
    • To enable Tomcat to listen on all configured interfaces, set rpc_address to 0.0.0.0.

    To change the IP address for client connections to DSE Search using the HTTP and Solr Admin interfaces, change the client connection rpc_address in initialization_options section of the cassandra.yaml file. The rpc_address is read on startup only..

  2. For advanced users only: In the Tomcat server.xml file, you can specify a different client connection port, other than the default port 8983. If you specify a connection port other than the default, the automatic SSL connection configuration that is typically performed by DataStax Enterprise is not done. You must provide the valid connector configuration, including keystore path and password. See the DataStax Support article Configuring the DSE Solr HTTP/HTTPS port.
  3. After making changes, restart the node.