Aha! Another possible solution put apache http server in front of ofbiz tomcat and use mod_proxy_ajp. Then perform URL filtering via the ProxyPass and ProxyPassReverse directives?
snowch wrote
No response - web app filters based on client IP address is the solution I will go with.