At the moment we're using Tomcat 8.5.x and Java 1.8.x (OpenJDK). I don't have Tomcat settings like the ones you show (property file style), because I use an external Tomcat and it's configured with XML files. The settings are the same as what's documented here:
https://dacurry-tns.github.io/deploying-apereo-cas/setup_tomcat_overview.html The only performance-related changes there would be enabling resource caching, enabling asynchronous requests (I don't believe CAS will work without this), and making sure that asynchronous logging is enabled. The SSL configuration does enable a better-performing SSL library, but I can't imagine that your problem lies there. (My reasons for enabling it were less for performance reasons and more for better support of newer ciphers, etc.) -- DAVID A. CURRY, CISSP *DIRECTOR • INFORMATION SECURITY & PRIVACY* THE NEW SCHOOL • INFORMATION TECHNOLOGY 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003 +1 646 909-4728 • david.cu...@newschool.edu On Mon, Jul 29, 2019 at 7:33 AM abdelrahman halawa < abdelrahmanhal...@gmail.com> wrote: > Hi david.curry, > How are youCould you tell me the Tomcat version you use? > Also, If you don't mind, reply to the previous email > > > On Sun, Jul 28, 2019 at 6:36 PM abdelrahman halawa < > abdelrahmanhal...@gmail.com> wrote: > >> Nice, I will try your JVM settings. >> By the way, the CPU reaches about 100% only with Java (CAS). >> Here my Tomcat configuration: >> >> server.max-http-header-size=2097152 >> server.use-forward-headers=true >> server.connection-timeout=20000 >> server.error.include-stacktrace=NEVER >> server.compression.enabled=true >> >> server.compression.mime-types=application/javascript,application/json,application/xml,text/html,text/xml,text/plain >> server.tomcat.max-http-post-size=2097152 >> server.tomcat.min-spare-threads=20 >> server.tomcat.max-threads=200 >> server.tomcat.accept-count=1024 >> server.tomcat.max-connections=10000 >> server.tomcat.port-header=X-Forwarded-Port >> server.tomcat.protocol-header=X-Forwarded-Proto >> server.tomcat.protocol-header-https-value=https >> server.tomcat.remote-ip-header=X-FORWARDED-FOR >> server.tomcat.uri-encoding=UTF-8 >> >> Could you share your Tomcat configuration with me? >> I want to check if the CPU issue related to Tomcat misconfiguration or not >> >> >> On Sun, Jul 28, 2019 at 5:47 PM David Curry <david.cu...@newschool.edu> >> wrote: >> >>> Well, I'm not too knowledgeable about Windows Server, but that seems >>> reasonable. Is the server in general at 90% CPU, or is it the actual Java >>> process that's at 90%? >>> >>> I don't run the embedded server so don't know its defaults -- What's the >>> Java heap size limited to? Should be less than the physical memory. What >>> garbage collector is it using? On our 4-core 16GB Linux servers we run this: >>> >>> jsvc.exec -Dcatalina.home=/opt/tomcat/latest >>> -Dcatalina.base=/opt/tomcat/latest -Djava.awt.headless=true >>> -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager >>> -Djava.util.logging.config.file=/opt/tomcat/latest/conf/logging.properties >>> -cp >>> /opt/tomcat/latest/bin/commons-daemon.jar:/opt/tomcat/latest/bin/bootstrap.jar:/opt/tomcat/latest/bin/tomcat-juli.jar >>> -pidfile /var/run/tomcat.pid -java-home /usr/lib/jvm/java-openjdk -user >>> tomcat -Xms512M -Xmx8192M -XX:+DisableExplicitGC >>> -XX:+UseConcMarkSweepGC -XX:+UseParNewGC -XX:MaxGCPauseMillis=500 >>> -server org.apache.catalina.startup.Bootstrap >>> >>> which is enough for CAS with Hazelcast ticket registry and the >>> management webapp (all in the same Tomcat process). We're also running a >>> small mongod (2gb cache size) on each server which handles the services >>> registry. Most of the time, the servers are idle or very close to it. >>> >>> Could you have something that takes a (relatively) long time that >>> causing the server to block? A slow LDAP, or slow database query, or >>> something? We had problems like that when we were using MongoDB as our >>> ticket registry; under heavy activity Mongo was too slow and the CAS >>> threads would block waiting on it to complete. It wasn't pretty. >>> >>> --Dave >>> >>> >>> -- >>> >>> DAVID A. CURRY, CISSP >>> *DIRECTOR • INFORMATION SECURITY & PRIVACY* >>> THE NEW SCHOOL • INFORMATION TECHNOLOGY >>> >>> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003 >>> +1 646 909-4728 • david.cu...@newschool.edu >>> >>> >>> On Sun, Jul 28, 2019 at 11:00 AM abdelrahman halawa < >>> abdelrahmanhal...@gmail.com> wrote: >>> >>>> How many CPUs? >>>> *4X* Intel(R) Xeon(R) @ 2.40GHz, 2400 Mhz, 2 Core(s) >>>> How much memory? >>>> 16G >>>> What operating system? >>>> Windows Server 2012 >>>> What else is running on the server (nothing, hopefully)? >>>> Nothing >>>> Is the server paging or swapping (you don't want it to be)? >>>> The default of Windows Server >>>> >>>> >>>> >>>> On Sun, Jul 28, 2019 at 4:44 PM David Curry <david.cu...@newschool.edu> >>>> wrote: >>>> >>>>> How many CPUs? >>>>> How much memory? >>>>> What operating system? >>>>> What else is running on the server (nothing, hopefully)? >>>>> Is the server paging or swapping (you don't want it to be)? >>>>> If you're running on Linux VMs, do you have an entropy source for the >>>>> crypto (you should)? >>>>> >>>>> >>>>> -- >>>>> >>>>> DAVID A. CURRY, CISSP >>>>> *DIRECTOR • INFORMATION SECURITY & PRIVACY* >>>>> THE NEW SCHOOL • INFORMATION TECHNOLOGY >>>>> >>>>> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003 >>>>> +1 646 909-4728 • david.cu...@newschool.edu >>>>> >>>>> >>>>> On Sun, Jul 28, 2019 at 7:51 AM abdelrahman halawa < >>>>> abdelrahmanhal...@gmail.com> wrote: >>>>> >>>>>> Hello all, >>>>>> >>>>>> I noticed that the CPU utilization of my CAS server reaches above 90% >>>>>> with only 75 concurrent users or maybe less. >>>>>> >>>>>> Has this happened with you as well? Any suggestions to overcome this? >>>>>> >>>>>> I use embedded Tomcat with default settings. >>>>>> >>>>>> Thanks in advance. >>>>>> >>>>>> -- >>>>>> - Website: https://apereo.github.io/cas >>>>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>>>> - List Guidelines: https://goo.gl/1VRrw7 >>>>>> - Contributions: https://goo.gl/mh7qDG >>>>>> --- >>>>>> You received this message because you are subscribed to the Google >>>>>> Groups "CAS Community" group. >>>>>> To unsubscribe from this group and stop receiving emails from it, >>>>>> send an email to cas-user+unsubscr...@apereo.org. >>>>>> To view this discussion on the web visit >>>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/fe73e941-cf70-4d77-a747-1f1c4d76a527%40apereo.org >>>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/fe73e941-cf70-4d77-a747-1f1c4d76a527%40apereo.org?utm_medium=email&utm_source=footer> >>>>>> . >>>>>> >>>>> -- >>>>> - Website: https://apereo.github.io/cas >>>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>>> - List Guidelines: https://goo.gl/1VRrw7 >>>>> - Contributions: https://goo.gl/mh7qDG >>>>> --- >>>>> You received this message because you are subscribed to the Google >>>>> Groups "CAS Community" group. >>>>> To unsubscribe from this group and stop receiving emails from it, send >>>>> an email to cas-user+unsubscr...@apereo.org. >>>>> To view this discussion on the web visit >>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAPPO%3D_pb%3Dg7_f5T28aUWLWEkYpyTNn_p27cq5tZQqLcOw%40mail.gmail.com >>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAPPO%3D_pb%3Dg7_f5T28aUWLWEkYpyTNn_p27cq5tZQqLcOw%40mail.gmail.com?utm_medium=email&utm_source=footer> >>>>> . >>>>> >>>> >>>> >>>> -- >>>> Best regards, >>>> ------------------------------------ >>>> >>>> >>>> [image: photo] >>>> *Abdelrahman Halawa* >>>> Teacher Assistant, Computer and Systems Department, Al-Azhar University >>>> +2 01008131693 <+2+01008131693> | abdelrahmanhal...@gmail.com | Skype: >>>> abdelrahmanhalawa <https://mail.google.com/mail/u/0/#> | Maadi, Cairo, >>>> Egypt >>>> <http://eg.linkedin.com/pub/abdelrahman-halawa/2b/689/886> >>>> <http://twitter.com/Abdelrahman_S_H> >>>> >>>> -- >>>> - Website: https://apereo.github.io/cas >>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>> - List Guidelines: https://goo.gl/1VRrw7 >>>> - Contributions: https://goo.gl/mh7qDG >>>> --- >>>> You received this message because you are subscribed to the Google >>>> Groups "CAS Community" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to cas-user+unsubscr...@apereo.org. >>>> To view this discussion on the web visit >>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMKQGEb5aaQ6-vNkqsC_XfZt8Y0HN5H%3D6iFwPC%3DeHsa9hPu2oA%40mail.gmail.com >>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMKQGEb5aaQ6-vNkqsC_XfZt8Y0HN5H%3D6iFwPC%3DeHsa9hPu2oA%40mail.gmail.com?utm_medium=email&utm_source=footer> >>>> . >>>> >>> -- >>> - Website: https://apereo.github.io/cas >>> - Gitter Chatroom: https://gitter.im/apereo/cas >>> - List Guidelines: https://goo.gl/1VRrw7 >>> - Contributions: https://goo.gl/mh7qDG >>> --- >>> You received this message because you are subscribed to the Google >>> Groups "CAS Community" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to cas-user+unsubscr...@apereo.org. >>> To view this discussion on the web visit >>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAO2bPNFfUdz6BCgyjA8tqrYWrgy__JmKd2H0ocAySkVYQ%40mail.gmail.com >>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAO2bPNFfUdz6BCgyjA8tqrYWrgy__JmKd2H0ocAySkVYQ%40mail.gmail.com?utm_medium=email&utm_source=footer> >>> . >>> >> >> >> -- >> Best regards, >> ------------------------------------ >> >> >> [image: photo] >> *Abdelrahman Halawa* >> Teacher Assistant, Computer and Systems Department, Al-Azhar University >> +2 01008131693 <+2+01008131693> | abdelrahmanhal...@gmail.com | Skype: >> abdelrahmanhalawa <https://mail.google.com/mail/u/0/#> | Maadi, Cairo, >> Egypt >> <http://eg.linkedin.com/pub/abdelrahman-halawa/2b/689/886> >> <http://twitter.com/Abdelrahman_S_H> >> > > > -- > Best regards, > ------------------------------------ > > > [image: photo] > *Abdelrahman Halawa* > Teacher Assistant, Computer and Systems Department, Al-Azhar University > +2 01008131693 <+2+01008131693> | abdelrahmanhal...@gmail.com | Skype: > abdelrahmanhalawa <https://mail.google.com/mail/u/0/#> | Maadi, Cairo, > Egypt > <http://eg.linkedin.com/pub/abdelrahman-halawa/2b/689/886> > <http://twitter.com/Abdelrahman_S_H> > > -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to cas-user+unsubscr...@apereo.org. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMKQGEYHXukSCO6pSrPRhKAT4Tnx6tY9PhP2abp1k_o_snR2wg%40mail.gmail.com > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMKQGEYHXukSCO6pSrPRhKAT4Tnx6tY9PhP2abp1k_o_snR2wg%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAMqgtgwWQ_Awa%2B8L3K3kQpveMM_CLieicYK97YwPmv04Q%40mail.gmail.com.
