Restrict Access to Apache

This example shows how to define different access rules for two different tomcat apps:

<VirtualHost _default_:443>
        <Location /tomcat-app-1*>
                JkMount app-1-loadbalancer
        </Location>
        <Location /tomcat-app-2*>
                JkMount app-2-loadbalancer
               # By default, everyone is locked out:
               Order deny,allow
               Deny from all

               # Allow localhost access:
               Allow from 127.0.0.0/8

               # Allow IP range 192.168.1.{1-255}
               Allow from 192.168.1.0/24

               # Allow another ip
               # Allow from 10.0.0.16

               JkMount app-2-loadbalancer
        </Location>

        ErrorLog logs/ssl_error_log
        TransferLog logs/ssl_access_log
        LogLevel warn
        SSLEngine on
        SSLProtocol all -SSLv2
        SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW
        SSLCertificateFile    /etc/pki/tls/certs/xxx.crt
        SSLCertificateKeyFile /etc/pki/tls/private/xxx.key

        <Files ~ "\.(cgi|shtml|phtml|php3?)$">
            SSLOptions +StdEnvVars
        </Files>

        <Directory "/var/www/cgi-bin">
            SSLOptions +StdEnvVars
        </Directory>

        SetEnvIf User-Agent ".*MSIE.*" \
                 nokeepalive ssl-unclean-shutdown \
                 downgrade-1.0 force-response-1.0

        CustomLog logs/ssl_request_log \
                  "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>