Cannot access tomcat instance installed in EC2

Question

I have install tomcat 7 in an Ubuntu EC2 instance. It's up and running but I cannot access it using the public ip (54.213.225.148:8080). I have also setup the security groups as specified in the previous posts. But, still no luck.

security groups setup

Any help on this would be really appreciated.

Can you connect to it from the instance itself (`curl localhost:8080...`)? — Uri Agassi, Feb 23 '14 at 11:38
Is the ec2 instance also running ubuntu? Did you open 8080 to tcp on Ubuntu Uncomplicated Firewall? https://wiki.ubuntu.com/UncomplicatedFirewall — jeremyjjbrown, Feb 23 '14 at 16:36
@UriAgassi : localhost:8080 works fine. Issue is i cannot access it from the public ip — Dilantha, Feb 24 '14 at 14:40
@jeremyjjbrown i tried sudo ufw allow ssh/tcp. but still the same issue — Dilantha, Feb 24 '14 at 14:41
@UriAgassi yes. The security group is default. It seems that the port 8080 is not open in the server. I tried sudo iptables -I INPUT -p tcp --dport 8080 -j ACCEPT. But still it shows as 8080 is not open — Dilantha, Feb 24 '14 at 15:04

score 6 · Accepted Answer · answered Feb 24 '14 at 15:56

6

Make sure your Ubuntu Uncomplicated Firewall is controlling the traffic instead of iptables.

sudo ufw enable

Then to configure it to allow 8080.

sudo ufw allow 8080

answered Feb 24 '14 at 15:56

jeremyjjbrown

7,772
5
43
55

Thanks a lot. It worked. One more thing to add is you will have to restart the server to effect the changes. – Dilantha Feb 24 '14 at 16:06
Your welcome. I assume you restarted after ufw enable but before opening 8080. – jeremyjjbrown Feb 24 '14 at 19:24
@jeremyjjbrown, I'm not able to ssh into the machine after this was done. Any suggestions? – Abilash Jan 22 '16 at 01:27
Alibash did you allow port 22? – jeremyjjbrown Jan 22 '16 at 02:38
@jeremyjjbrown Should I restart the EC2 instance or just tomcat7 server (which is installed within EC2 instance) – sofs1 Sep 04 '16 at 02:37
1

@user3705478 I wouldn't use UFW in EC2 I would use AWS security groups instead. – jeremyjjbrown Sep 06 '16 at 12:42

score 1 · Answer 2 · edited May 06 '19 at 23:34

1

You should Add the port number to the firewall setting in the system also.

sudo iptables -I INPUT -p tcp --dport 8080 -j ACCEPT

where 8080 is the tomcat port number.

edited May 06 '19 at 23:34

Pritam Banerjee

17,953
10
93
108

answered Feb 23 '14 at 18:31

shivaghaneesh

19
2

Thanks for your reply.. I have already tried this. But still the same result. :( – Dilantha Feb 24 '14 at 14:39
Try this sudo service iptables stop – shivaghaneesh Feb 24 '14 at 17:57

score 0 · Answer 3 · answered Nov 13 '14 at 22:06

On Ubuntu 14.04 in EC2

#to save the rules you have created and to load them when the server starts.
sudo apt-get install iptables-persistent
sudo service iptables-persistent start

#the rule that explicitly accepts your current SSH connection
sudo iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
#block all incoming traffic, except for those: 22 for SSH and 80 for web traffic
sudo iptables -A INPUT -p tcp --dport ssh -j ACCEPT
#block the remaining traffic
sudo iptables -A INPUT -j DROP
#allow loopback access
sudo iptables -I INPUT 1 -i lo -j ACCEPT
#save changes
sudo /etc/init.d/iptables-persistent save

#allow port 8080
sudo iptables -I INPUT 1 -p tcp --dport 8080 -j ACCEPT
sudo /etc/init.d/iptables-persistent save

Cannot access tomcat instance installed in EC2

5 Answers5

Linked