log4j.properties loaded twice, tomcat files rolling failed

2014-07-10 Thread guowei
Dear all, Tomcat Version: 7_0_50 Log4j: log4j-1.2.17 I am using log4j for tomcat internal logging and also application logging. I followed Tomcat's instruction to configure log4j rolling and I also have configured my application to have its own log4j rolling. log4j.jar is in both Tomcat's lib

Re: VERY HIGH TRAFFIC TUNING

2014-07-10 Thread André Warnier
Christopher Schultz wrote: ... Interesting... load average is a crude measure of activity; I suppose that having those timeouts means that there is activity on a thread even when there is no real "work" to be done. I do recommend leaving the timeouts set to their defaults (-1 = infinite). In

RE: [tomcat-users] DISA compliance tomcat 7.0.53

2014-07-10 Thread Jason Pyeron
> -Original Message- > From: Jason Ricles > Sent: Thursday, July 10, 2014 15:28 > > Where can I find a checklist so that I may make my tomcat server DISA > compliant? I think the term you are looking for is STIG compliant. Please let us know more about the context, can you view the IASE

DISA compliance tomcat 7.0.53

2014-07-10 Thread Jason Ricles
Where can I find a checklist so that I may make my tomcat server DISA compliant? -- Jason Ricles Jr Software Engineer Mikros Systems Corp

Re: VERY HIGH TRAFFIC TUNING

2014-07-10 Thread Leon Rosenberg
answering only to the one directed at me (or so I think): On Thu, Jul 10, 2014 at 4:09 PM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Leon, > > > If you have very fast connections, go for a smaller amount. If you > > have kee

Re: VERY HIGH TRAFFIC TUNING

2014-07-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hernán, On 7/10/14, 11:19 AM, doomito wrote: > Hi! I already did some testing. First of all, setting the > connectiontimeout was not a good idea :) While the servers seems to > be able to handle the same load, the load average went up. Interesting.

Re: APR with PKCS11 support

2014-07-10 Thread Sanaullah
Thanks chris, I haven't tried such configurations with httpd. I will explore now. Regards, Sanaullah On Thu, Jul 10, 2014 at 7:40 PM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Sanaullah, > > On 7/10/14, 4:19 AM, Sanaullah

Re: VERY HIGH TRAFFIC TUNING

2014-07-10 Thread doomito
Hi! I already did some testing. First of all, setting the connectiontimeout was not a good idea :) While the servers seems to be able to handle the same load, the load average went up. It is very very interesting what you mention regarding mod_proxy being faster than mod_jk / mod_proxyAJP. So if

Re: css files served as application/x-pointplus

2014-07-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sergio, On 7/10/14, 2:26 AM, Sergio Fernández wrote: > On 08/07/14 09:45, Konstantin Kolinko wrote: >> There is no "application/x-pointplus" string in the default >> conf/web.xml of Tomcat. So first you have to find where the >> string comes from.

Re: APR with PKCS11 support

2014-07-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sanaullah, On 7/10/14, 4:19 AM, Sanaullah wrote: > is there a way i can use pkcs11 supported SmartCard/token when > using APR based SSL Connector in tomcat ? PEM encoded certificates > and keys are stored in smartcard. > > I know BIO/NIO connectors

Re: VERY HIGH TRAFFIC TUNING

2014-07-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hernán, On 7/9/14, 11:50 AM, doomito wrote: > Thank you for the answer. I will begging experimenting on 1 box > with this configuration: > > > emptySessionPath="true" redirectPort="8443" maxThreads="2048" > minSpareThreads="32" connectionTimeout

Re: VERY HIGH TRAFFIC TUNING

2014-07-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Leon, On 7/9/14, 3:16 AM, Leon Rosenberg wrote: > On Wed, Jul 9, 2014 at 4:47 AM, Hernán Marsili > wrote: >> For the past 4 years we has been working with a 'stable' >> configuration in which we put APACHE in front of TOMCAT7 >> (previously Tomcat6

Re: Embedded Tomcat question

2014-07-10 Thread Mark Thomas
On 10/07/2014 03:13, John D. Ament wrote: > Well, thanks for the helpful advice thus far.. > > So, now that I've added a listener properly, I get this: > > java.lang.UnsupportedOperationException: Section 4.4 of the Servlet > 3.0 specification does not permit this method to be called from a > Ser

Re: VERY HIGH TRAFFIC TUNING

2014-07-10 Thread André Warnier
doomito wrote: Thank you for the answer. I will begging experimenting on 1 box with this configuration: emptySessionPath="true" redirectPort="8443" maxThreads="2048" minSpareThreads="32" connectionTimeout="2" keepAliveTimeout="1" enableLookups="false" request.registerRequests="fal

APR with PKCS11 support

2014-07-10 Thread Sanaullah
Hi All, is there a way i can use pkcs11 supported SmartCard/token when using APR based SSL Connector in tomcat ? PEM encoded certificates and keys are stored in smartcard. I know BIO/NIO connectors supported token/HSM but I am looking for APR based connectors? Regards, Sanaullah