See forum posting:
I'd like to deploy several web apps in a single JBoss server. Some of these apps are for internal use only. For security reasons it is required that the internal apps are not available on the same port as the external apps. Using regular vhosts is not sufficient as the vhost being accessed entirely depends on the Host: HTTP header sent by the client so requests to the "internal" vhosts cannot be blocked by the firewall on the TCP/IP layer but only by analyzing the HTTP request on the application layer.
As Scott Stark suggested in a reply to my forum posting it would be great if different Tomcat HTTP Connectors could be mapped to each vhost.