I'm blanking on a usecase for that, but my recommendation is to run behind a reverse proxy - there you can do such stuff with the least impact. As tomcat handles the "exposure" side - e.g. listening to port 8080 - I can't think of any other non-invasive way.

And I don't see why I'd try this - but that's up to you.