# Security for Tomcat Setup

* During Replication data is transferred over a secured protocol HTTPS. DBSync Cloud Replication runs on top of Tomcat and the Tomcat setup can be secured with one of the methods below.
* Route all calls through a front router like Apache (<http://tomcat.apache.org/connectors-doc/>). You can also use ApacheProxy Pass and setup .htaccess security on your Apache instance to provide your authentication.
* Use Tomcat Authentication/Security Realm (<http://tomcat.apache.org/tomcat-6.0-doc/realm-howto.html>). You can configure tomcat/conf/server.xml with your security/user settings.
* Our application is built on the Spring framework. This option will require a bit of coding (a bit more involved than the above 2). You can add spring-security in our app (<http://static.springsource.org/spring-security/site/docs/3.0.x/reference/springsecurity-single.html#ns-minimal>).


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.mydbsync.com/cloud-replication-main/tomcat/security-for-tomcat-setup.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.