Re: [SECURITY] CVE-2017-12617 Apache Tomcat Remote Code Execution via JSP upload

2017-10-04 Thread Michael Smith
Mark, Do you know if tomcat 5.x and 6.x are vulnerable to this issue? I know they are not supported, but are they exploitable by this vulnerability? Thx Mike On 3 October 2017 at 11:55, Mark Thomas wrote: > CVE-2017-12617 Apache Tomcat Remote Code Execution via JSP Upload >

RE: JMX currentThreadsBusy less than connections/requests when use APR connector

2017-03-08 Thread smith
Our production usage also has same phenomenon that my "currentThreadsBusy" always not high (3-5), but my "currentThreadCount" will go to 200-300 sometimes. I know that at some busy time, more threads will be created, so the thread pool get high, but at the same time, the busy threads will also

RE: FW: tomcat 8080 thread not reduced

2017-01-21 Thread smith
sockets count: 1 Current thread count: 23 I want to know if these 23 threads are free to use, or they are active, cannot accept new connection? Here are Keeped alive sockets count, it's only 1, is this 1 for the busy thread or a thread in 23? -Smith -Original Message- From: Christopher

RE: FW: tomcat 8080 thread not reduced

2017-01-19 Thread smith
-Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Thursday, January 19, 2017 4:38 PM To: Tomcat Users List Subject: Re: FW: tomcat 8080 thread not reduced -BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Smith, On 1/18/17 8:25 PM, smith wrote: > I

RE: FW: tomcat 8080 thread not reduced

2017-01-18 Thread smith
us the correct active threads count. In another email thread, you said if use , it will tell us the right active thread count not just busy count, right? -smith -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Wednesday, January 18, 2017 3:28 PM

Re[2]: FW: tomcat 8080 thread not reduced

2017-01-18 Thread Smith Hua
Warnier (tomcat) a...@ice-sa.com : >On 18.01.2017 10:56, smith wrote: >> Hi, André >> >> Thanks for the great explanation. So the current thread count will grow >> always until it reaches to the max configuration. >> >> I have another strange thing: >>

Re[2]: FW: tomcat 8080 thread not reduced

2017-01-18 Thread Smith Hua
thanks, our monitor is getting the result from the tomcat manager page which provides the busy threads count and totol threads count -- 从myMail的Android专用app所发送 星期三, 18 一月 2017, 06:08下午 +08:00 发件人 André Warnier (tomcat) a...@ice-sa.com : >On 18.01.2017 10:56, smith wrote: >>

RE: FW: tomcat 8080 thread not reduced

2017-01-18 Thread smith
are different, than what applies to your case (which consists of direct HTTP connections from browsers, to the tomcat HTTP connector). So Philippe's case introduces probably an additional level of complexity into the equation. semi-graphically : smith case : client <- HTTP -> tomcat HTTP

RE: FW: tomcat 8080 thread not reduced

2017-01-18 Thread smith
. So Philippe's case introduces probably an additional level of complexity into the equation. semi-graphically : smith case : client <- HTTP -> tomcat HTTP connector - tomcat thread Philippe's case : client <- HTTP -> apache httpd + ajp module <- AJP -> tomcat AJP connect

RE: Re: FW: tomcat 8080 thread not reduced

2017-01-17 Thread smith
of 'idle' workers back from the highest value it had reached. Le 2017-01-16 à 05:24, André Warnier (tomcat) a écrit : > On 16.01.2017 11:10, smith wrote: >> We has same problem on dev env that no any traffic to the serive, > > Ah. That is /new/ information, which may change the su

RE: FW: tomcat 8080 thread not reduced

2017-01-17 Thread smith
Thanks chris So the tomcat default executor will not reduce the thread count until it reach to the max configuration? Will it reduce when it reach to max? And why the default not reduce the thread? -Smith -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net

RE: FW: tomcat 8080 thread not reduced

2017-01-16 Thread smith
wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Smith, > > There are your only active s: > > On 1/14/17 1:30 AM, smith wrote: >> > connectionTimeout="2" redirectPort="8443" /> >> >> [snip] >> >>

RE: FW: tomcat 8080 thread not reduced

2017-01-16 Thread smith
thread not reduced -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Smith, There are your only active s: On 1/14/17 1:30 AM, smith wrote: > connectionTimeout="2" redirectPort="8443" /> > > [snip] > > You have not changed any settings from the default.

RE: FW: tomcat 8080 thread not reduced

2017-01-16 Thread smith
On 16.01.2017 09:50, smith wrote: > Busy one is process customer request, do not know what non-busy one is > doing, always keep 120 for many days. I don't think 20s timeout will > not cause so long connection > > -smith And did you actually try it ? We do not know your website or your app

RE: FW: tomcat 8080 thread not reduced

2017-01-16 Thread smith
Busy one is process customer request, do not know what non-busy one is doing, always keep 120 for many days. I don't think 20s timeout will not cause so long connection -smith -Original Message- From: André Warnier (tomcat) [mailto:a...@ice-sa.com] Sent: Monday, January 16, 2017 8:33

Re[2]: FW: tomcat 8080 thread not reduced

2017-01-15 Thread Smith Hua
e 20 >seconds) ? > >Do you still see the number of threads remaining at the maximum ? > >See : >http://tomcat.apache.org/tomcat-8.0-doc/config/http.html#Standard_Implementation >--> connectionTimeout >and the fact that it is

RE: FW: tomcat 8080 thread not reduced

2017-01-13 Thread smith
- From: André Warnier (tomcat) [mailto:a...@ice-sa.com] Sent: Friday, January 13, 2017 10:42 AM To: users@tomcat.apache.org Subject: Re: FW: tomcat 8080 thread not reduced On 13.01.2017 09:38, smith wrote: > > > > > From: smith [mailto:smith@zoom.us] > Sent: Tuesday, Januar

FW: tomcat 8080 thread not reduced

2017-01-13 Thread smith
From: smith [mailto:smith@zoom.us] Sent: Tuesday, January 10, 2017 9:57 AM To: 'users' Subject: tomcat 8080 thread not reduced Hi, We have installed Apache Tomcat/8.0.14, and found that after one period of time, the thread count for 8080(our port published) goes to 120

Re: CONFIRM unsubscribe from users@tomcat.apache.org

2016-07-07 Thread Andy Smith
dont remove From: Felix Schumacher To: users@tomcat.apache.org Sent: Thursday, July 7, 2016 1:02 PM Subject: Re: CONFIRM unsubscribe from users@tomcat.apache.org Am 07.07.2016 um 20:01 schrieb users-h...@tomcat.apache.org: > Hi! This is the ezmlm

Using MANIFEST.MF in Tomcat 8

2016-02-09 Thread Andy Smith
context or am I limited to the WEB-INF/lib directory only for supporting jar files? Regards, Andy Smith

Re: Tomcat & SOAP/Rest +/- jax-ws or Axis2 or cxf ????

2015-11-01 Thread Howard W. Smith, Jr.
On Sun, Nov 1, 2015 at 2:31 AM, N.s.Karthik wrote: > Hi > spec : jdk 1.7 > Container Tomcat 7.x > O/s : Oracle Linux > > Question : Need a *Simple & Single Framework to support both "SOAP & Rest"* > based services. > > Which one is the best to make use of ?? > > Jax-ws

Re: Tomcat 8 reliability/performance on Windows 2008 R2 Server vs. RHEL/CentOS

2015-10-01 Thread Howard W. Smith, Jr.
On Thu, Oct 1, 2015 at 11:46 AM, Aurélien Terrestris wrote: > I recommend Linux for 2 reasons : > - easier to install and maintain a secured Tomcat (especially when > using different TOMCAT_HOME & TOMCAT_BASE, on Windows it's pretty > difficult to know how to secure all

Re: Is Container Managed Transactions possible in case of Tomcat ?

2015-08-19 Thread Howard W. Smith, Jr.
On Aug 19, 2015 3:56 PM, Sreyan Chakravarty sreyan.mail...@gmail.com wrote: TomEE supports Apache OpenJPA. What if I wanted to use Hibernate as my JPA provider ? I searched Google for tomee hibernate tutorial And found http://tomee.apache.org/examples-trunk/jpa-hibernate/README.html

Re: Tomcat Maven plugin failure: tries to use a TLSv1 handshake with a TLSv1.2 server.

2015-03-05 Thread Stu Smith
the help! Take care, -stu On Thu, Mar 5, 2015 at 8:34 AM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Stu, On 3/5/15 2:23 AM, Stu Smith wrote: Hello, I'm using the tomcat maven plugin to deploy to an SSL-enabled host. I've

Tomcat Maven plugin failure: tries to use a TLSv1 handshake with a TLSv1.2 server.

2015-03-04 Thread Stu Smith
Hello, I'm using the tomcat maven plugin to deploy to an SSL-enabled host. I've pointed maven at copy of the keystore used on the tomcat server itself, so all the keys should be there. Also, I enabled java.net.ssl.debug=all, and confirmed the public key, intermediate cert, and CA cert are

SSL Root Cert install

2014-11-05 Thread Matthew Smith
I'm running Apache Tomcat 7 on Windows Server 2008 R2 with Java jdk 1.8.0_25. I was able to use the keytool.exe command with the -genkey switch to create a keystore. I then used keytool.exe to create a CSR which I submitted to an issuer and received a certificate. I have to use keytool.exe to

Excessive threads crashing tomcat

2014-10-21 Thread Smith, Mitchell
Hi I have an issue where my applicaion servers have recently started failing with OOM - cannot create native thread errors. However the dump files all show he majority of threads (over 90%) like the following: pool-21088-thread-1 - Thread t@36407 java.lang.Thread.State: WAITING at

Re: Excessive threads crashing tomcat

2014-10-21 Thread Smith, Mitchell
Tomcat7 Java1.7_025 On 21 October 2014 20:06, Smith, Mitchell mitchell.sm...@cwc.com wrote: Hi I have an issue where my applicaion servers have recently started failing with OOM - cannot create native thread errors. However the dump files all show he majority of threads (over 90%) like

Re: Tomcat Connection Pool Problems with XtraBackup

2014-10-13 Thread John Smith
On Sun, Oct 12, 2014 at 5:56 AM, Stefan Mayr ste...@mayr-stefan.de wrote: Hi John, Am 11.10.2014 23:30, schrieb John Smith: I'm trying to workout a managed backup scheme on a MySQL production database with XtraBackup. According to our DBA, XtraBackup doesn't lock the database, but issues

Re: Windows Tomcat install folder

2014-10-13 Thread John Smith
I don't know about the recommended way, but personally I hate the SPACE in Program Files, so I definitely prefer the 2nd option. Same, I don't even bother with the second level directory. I just install to c:\apache-tomcat...

Tomcat Connection Pool Problems with XtraBackup

2014-10-11 Thread John Smith
I'm trying to workout a managed backup scheme on a MySQL production database with XtraBackup. According to our DBA, XtraBackup doesn't lock the database, but issues a series of SHOW TABLE STATUS commands and then works on the file system level. Still, just as XtraBackup runs my logs start to blow

Re: Daily catalina.out has thousands of NPEs

2014-08-27 Thread John Smith
You haven't really provided any information, here. Please post full stack traces. You might want to do something like catch NPE around the area(s) where they are being thrown, and log information about the requests that are causing them. It may be something like a web search crawler

Daily catalina.out has thousands of NPEs

2014-08-22 Thread John Smith
TC 7.0.54, RHEL 6, JDK 1.7.0_60. I have two RH servers with one instance of TC on each, set up for clustering. There's a HWLB routing 80 to 8080 with 5 min sticky sessions. My daily catalina logs are set up to just show SEVERE errors, every day they average about *30mb* per server with the same

Re: java.lang.IllegalArgumentException at java.nio.Buffer.limit

2014-08-22 Thread John Smith
Smith tomcat.ran...@gmail.com wrote: On Fri, Aug 8, 2014 at 9:10 AM, John Smith tomcat.ran...@gmail.com javascript:; wrote: On Thu, Aug 7, 2014 at 5:28 PM, Filip Hanik fi...@hanik.com javascript:; wrote: if you could capture the XML that you are trying to write, we can put

Re: java.lang.IllegalArgumentException at java.nio.Buffer.limit

2014-08-18 Thread John Smith
On Fri, Aug 8, 2014 at 9:10 AM, John Smith tomcat.ran...@gmail.com wrote: On Thu, Aug 7, 2014 at 5:28 PM, Filip Hanik fi...@hanik.com wrote: if you could capture the XML that you are trying to write, we can put it into a test case and reproduce. Filip I'll try that -- I should be able

Re: java.lang.IllegalArgumentException at java.nio.Buffer.limit

2014-08-08 Thread John Smith
What's on line 182 of AbstractServlet.java? -Terence Bandoian It's the out.write(xml); line.

java.lang.IllegalArgumentException at java.nio.Buffer.limit

2014-08-07 Thread John Smith
TC 7.0.54 / RHEL 6 / JDK 1.7.0_60 I'm getting a pretty consistent error in my logs that started showing up recently. I use logback and have a servlet catch all 500 errors and log them. The error seems to be associated with one servlet that writes XML output. Two changes I made recently were

Re: Restricting SSL access within webapp

2014-08-05 Thread John Smith
All, Thanks for the thoughtful advice and replies. To answer a few questions, belatedly, yes it would be an option to move the admin tools to another instance of TC, as Leo suggested -- in a way a better one, since it wouldn't need session replication, could exist on a single server since the

Re: JKS keystore password Encryption

2014-08-05 Thread John Smith
You may find Wiki also useful: http://wiki.apache.org/tomcat/FAQ/Password -Ognjen Write your own datasource implementation which wraps your datasource and obscure your brains out (XOR http://en.wikipedia.org/wiki/XOR_cipher and ROT13 http://en.wikipedia.org/wiki/ROT13 are great

SSL redirect problems

2014-08-01 Thread John Smith
TC 7.0.54 / RHEL 6 I have two physical servers, each running an instance of TC. The servers are behind a hardware loadbalancer. IPTables is routing request on 80 to 8080. Tomcat runs under a non-root user. All good. I needed to protect an area of our webapp under SSL. Went ahead and installed

Re: SSL redirect problems

2014-08-01 Thread John Smith
TC 7.0.54 / RHEL 6 I have two physical servers, each running an instance of TC. The servers are behind a hardware loadbalancer. IPTables is routing request on 80 to 8080. This seems unnecessary. If you have a hardware load balancer in front of Tomcat, it is the only thing that

Re: SSL redirect problems

2014-08-01 Thread John Smith
Not contradicting anything Daniel is saying, but maybe something to add, and maybe that's the missing part of the original puzzle : If Tomcat is expecting HTTPS requests on port 8443, then any re-direct or response that it is sending back is going to include that port number after the

Re: SSL redirect problems

2014-08-01 Thread John Smith
On Fri, Aug 1, 2014 at 11:54 AM, Mark Thomas ma...@apache.org wrote: On 01/08/2014 16:30, Daniel Mikusa wrote: You probably want the SSL certificate installed on your hardware load balancer. End client's browsers are going to connect to the hardware load balancer, not Tomcat. Thus you'd

Re: SSL redirect problems

2014-08-01 Thread John Smith
No, I am not really going that far. I am suggesting that that may be the kind of thing that is happening, and that you may want to investigate with a browser plugin, that the requests/responses are really what you are expecting. Your initial explanation was a bit confusing and lacking in

Re: SSL redirect problems

2014-08-01 Thread John Smith
As your testing keep this process in mind. If you encounter a problem just try to break down the flow from your browser to the server and back. If you look at the request at each hop through this process, you can often find where things went wrong. For example, did the request hit the LB?

Re: SSL redirect problems

2014-08-01 Thread John Smith
Is your LB configured to listen on 8443, or on 443? It won't pick up the port it's supposed to listen on from the TC instances; you have to specify it. Nailed it. Simplest solution, I didn't even consider it. Thanks, John

Re: SSL redirect problems

2014-08-01 Thread John Smith
There is no response, since you are not even able to connect to that IP:port. If you are using the IP of the LB, then the LB is not accepting connections on port 8443. You won't get much further, unless you solve that first. But I thought that you wanted your users to access via port 443

Restricting SSL access within webapp

2014-08-01 Thread John Smith
In my webapp there's a directory '/admin' that's protected under SSL. Users are forced to use SSL via a security constraint in web.xml. It works great. As mentioned in the docs and other places, it would be good to prevent SSL everywhere else on the site, but I searched around and couldn't find

Re: SSL redirect problems

2014-08-01 Thread John Smith
Thanks for letting us know what the issue was; many people never come back and tell us what fixed it. My pleasure. This list is awesome.

Re: SSL redirect problems

2014-08-01 Thread John Smith
TLS is layer 5 so if the LB is operating at layer 4 it can't host the cert. Some LBs can operate at layer 5 so it will depend on your LB and/or its configuration. Mark I see. That's good to know. The LB is at 7.

Re: Restricting SSL access within webapp

2014-08-01 Thread John Smith
On Fri, Aug 1, 2014 at 4:34 PM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: John Smith [mailto:tomcat.ran...@gmail.com] Subject: Restricting SSL access within webapp What's the correct way to selectively restrict https to only one area of a webapp? Why would you want

Re: TC7 and SSL Questions

2014-07-28 Thread John Smith
On Thu, Jul 24, 2014 at 6:24 PM, Ognjen Blagojevic ognjen.d.blagoje...@gmail.com wrote: John, On 24.7.2014 21:11, John Smith wrote: 1. Can I specify /admin/* as a security constraint url pattern so that only that directory runs under SSL? Yes, you can. 2. The NIO connector

TC7 and SSL Questions

2014-07-24 Thread John Smith
TC 7.0.54 / JDK 1.7.0_60 / RHEL 6 My webapp is the only one on my TC install. It's in webapps/ROOT. Iptables routes 80 to 8080 and I'm using the NIO connector. There are two physical servers with that same webapp, using session replication. Everything works great. There's a subdirectory /admin

Silent failure to deploy or run from configuration descriptor

2014-07-02 Thread Gulliver Smith
Apache Tomcat/7.0.28, Debian I have two configuration descriptors in /etc/tomcat7/Catalina/localhost/ One, solr.xml deploys correctly and fills catalina.out with lots of useful messages. The other fails silently to start (see below). I see the message INFO: Deploying configuration descriptor

Getting 405 status from local Tomcat on Windows

2014-05-30 Thread Dave Smith
the 405 status. (the client works fine if connecting to the real server running tomcat 6 on an Ubuntu server.) I can find no place locally where verb filtering is being configured. Any idea will be greatly appreciated. Dave Smith Brindle Waye, Ltd. 866-522-9839 ext 823 Design-a-Course

Re: SSL on one subdirectory only.

2014-05-29 Thread John Smith
On Tue, May 27, 2014 at 2:21 PM, Mark Thomas ma...@apache.org wrote: On 27/05/2014 17:31, John Smith wrote: Tomcat 7.0.42, RHEL6, JDK1.7.0_25, Standalone TC configuration. IPTABLES route port 80 to 8080 I've got a subdirectory like 'www.mysite.com/admin' that I want to put under FORM

Re: SSL on one subdirectory only.

2014-05-29 Thread John Smith
2. With the SSL connector enabled, https://* is globally respected on the entire webapp. Do I need to manually check the URL/protocol to deny or redirect https to http outside of '/admin'? Is there any built in TC mechanism or suggested best practice to handle this? or should I not care?

SSL on one subdirectory only.

2014-05-27 Thread John Smith
Tomcat 7.0.42, RHEL6, JDK1.7.0_25, Standalone TC configuration. IPTABLES route port 80 to 8080 I've got a subdirectory like 'www.mysite.com/admin' that I want to put under FORM based authentication. That's clear enough, and I've got the java keytool cert working well enough on my dev box until I

Re: RES: Configuring limits of requests/sessions/threads in Tomcat

2014-04-01 Thread Howard W. Smith, Jr.
On Tue, Apr 1, 2014 at 9:30 PM, Frederik Nosi frederik.n...@postecom.itwrote: If so, just put an nginx or such in front of you'r Tomcat, you dont need an application server for that, it's just like using a tank to shoot a mosquito :P Wow, LOL!

Re: [OT] timeout

2014-03-31 Thread Howard W. Smith, Jr.
On Mar 31, 2014 3:48 AM, André Warnier a...@ice-sa.com wrote: Howard W. Smith, Jr. wrote: On Sun, Mar 30, 2014 at 9:54 PM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Howard W. Smith, Jr. [mailto:smithh032...@gmail.com] Subject: Re: timeout

Re: Request for better deployment usability: should be able to specify context root inside war

2014-03-31 Thread Howard W. Smith, Jr.
On Mon, Mar 31, 2014 at 1:27 PM, Mark Eggers its_toas...@yahoo.com wrote: As far as Glassfish versus Apache Tomcat goes, they address different use cases. Glassfish is a J2EE application server. Apache Tomcat is a servlet container. While you can convince Apache Tomcat to do a lot of things,

Re: timeout

2014-03-30 Thread Howard W. Smith, Jr.
On Sun, Mar 30, 2014 at 6:30 PM, André Warnier a...@ice-sa.com wrote: - and if that is not the reason, then find the person responsible for the in-between equipment and ask them why their junk closes the connection before your application has a chance to respond 'junk'? please clarify the

Re: timeout

2014-03-30 Thread Howard W. Smith, Jr.
On Sun, Mar 30, 2014 at 9:54 PM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Howard W. Smith, Jr. [mailto:smithh032...@gmail.com] Subject: Re: timeout - and if that is not the reason, then find the person responsible for the in-between equipment and ask them why

Re: PooledConnection.getConnection - Tomcat JDBC Pool

2014-03-25 Thread John Smith
If that is the case the tomcat jdbc pooling library handling the call incorrectly and its a bug. I'd be suspect of this. Are you actually using *org.apache.tomcat.jdbc.pool*? Since it's a Tomcat module it seems an odd choice to use outside of Tomcat.

Re: Concurrency - Servlet created instances accessing static classes

2014-03-25 Thread John Smith
If the method is thread-safe - no issue. If it isn't thread-safe then you have a problem. Mark Thanks Mark - Clearly and succinctly explained. Best, John

Re: Concurrency - Servlet created instances accessing static classes

2014-03-25 Thread John Smith
First terminology problem: class X isn't instantiated here, an object of type class X is instantiated. As Matisse once said, exactitude is not truth. This sort of hair splitting isn't helpful. Say Class X is instantiated to a thousand programmers and they'll understand that it means an

Re: Concurrency - Servlet created instances accessing static classes

2014-03-25 Thread John Smith
You must have been fun to have as a student. Student is a vague term. Student of which grade, which subject? Student of a trade? Student of life? Unfortunately your lack of exactness means I can't understand your joke :) (I was an even worse employee) - John

Re: PooledConnection.getConnection - Tomcat JDBC Pool

2014-03-25 Thread John Smith
On Tue, Mar 25, 2014 at 9:54 AM, Filip Hanik fi...@hanik.com wrote: Please open a bug, and we will get this taken care of. I do have one question,Aries library, on which call does it expect to return the connection to the pool? XAConnection.close() or XAConnection.getConnection().close(); ?

Re: Can we increase the logging in localhost_access.log

2014-03-25 Thread John Smith
We see 404 error in localhost_access so this the place from where we can dig into. Is there any way we can enhance the logging/information in localhost_access_log. Or then how can debug what happens between user requests and 404 response,? Outside of performance monitoring tools, you might

Concurrency - Servlet created instances accessing static classes

2014-03-24 Thread John Smith
I should know this, but I want to confirm with smarter people on the board. Assume the following: 1. Servlet receives an HTTP POST request. doPost(...) is called. 2. doPost(..) instantiates class X with each request 3. Class X calls a static method of class Y Assuming I have no synchronization

Re: Detecting out-of-memory condition

2014-03-24 Thread Howard W. Smith, Jr.
On Mon, Mar 24, 2014 at 1:57 PM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: James H. H. Lampert [mailto:jam...@touchtonecorp.com] Subject: Detecting out-of-memory condition We have noticed that after a certain amount of continuous uptime, Tomcat eventually runs out of

Re: Effects of turning off sendFile in the NIO connector

2014-03-23 Thread John Smith
MGwhen you enable sendfile support with request attr org.apache.tomcat.sendfile.support = true MGYou will need to set these 3 header attributes org.apache.tomcat.sendfile.filename: Canonical filename of the file which will be sent as a String org.apache.tomcat.sendfile.start: Start

Re: Effects of turning off sendFile in the NIO connector

2014-03-23 Thread John Smith
John The consequences for disabling sendFile are extremely hard to quantify as there are so many variables. I would normally expect there to be more CPU load but how much more? No idea. It might be impossible to detect, it might leaver your CPUs pegged at 100%. The only way you will know

Effects of turning off sendFile in the NIO connector

2014-03-22 Thread John Smith
What effect would setting useSendfile=false have on a web application using the NIO connector? I'm asking because I may want to use gzip compression in the connector. The docs state: *There is a tradeoff between using compression (saving your bandwidth) and using the sendfile feature (saving your

Re: Site down for maintenance senario

2014-03-17 Thread John Smith
Deploy a ROOT web application whose 404 page says Down for maintenance. You could even customize this kind of thing to only respond to certain URL-prefixes (like [ROOT]/mywebapp/*). What will you do while Tomcat is restarting, though, if you have to restart? Restarts take about a second or

Hosting recommendations

2014-03-17 Thread John Smith
We're getting killed by our hosting provider (RS) over bandwidth issues. I swear we scoped this out but somehow were over our agreement by an alarming amount. Our daily bandwidth looks like this: http://s17.postimg.org/btl0sj3jz/rs_traffic.png That's ~4T/day in bandwidth. I know it's a little

Re: tomcat-native libraries

2014-03-17 Thread John Smith
Installing the native library will make a difference. Whether the difference is large enough to notice depends very much on your application. If you want to improve your application's performance I suspect your time would be better spent with a profiler to see where the bottlenecks are in

Re: Hosting recommendations

2014-03-17 Thread John Smith
On Mon, Mar 17, 2014 at 9:55 AM, Mark Thomas ma...@apache.org wrote: On 17/03/2014 13:41, John Smith wrote: We're getting killed by our hosting provider (RS) over bandwidth issues. I swear we scoped this out but somehow were over our agreement by an alarming amount. Our daily

Re: Hosting recommendations

2014-03-17 Thread John Smith
On Mon, Mar 17, 2014 at 10:25 AM, Mikolaj Rydzewski m...@ceti.pl wrote: On 17.03.2014 15:15, John Smith wrote: 1. Yes, we have ~500,000 visitors per day, and the site is based around a very popular game that is very data intensive (users creating, browsing and loading levels and replays

Re: Possible Tomcat 8.0.3 issue

2014-03-17 Thread Howard W. Smith, Jr.
On Mon, Mar 17, 2014 at 4:14 PM, Felipe Jaekel fkjae...@gmail.com wrote: My Tomcat 7 was running fine with this script, but last friday morning I started Tomcat 8 setting only this: *-Xms2048m -Xmx2048m -XX:MaxPermSize=1024m -Dorg.apache.el.parser.COERCE_TO_ZERO=false* and the applications

Re: Possible Tomcat 8.0.3 issue

2014-03-13 Thread Howard W. Smith, Jr.
On Thu, Mar 13, 2014 at 9:33 AM, burghard.britzke b...@charmides.in-berlin.de wrote: may be restarting the context would even be sufficient? May be the FacesServlet has an issue which implementation are you using? which version? which version of PrimeFaces? earlier, in the thread, he

Re: Possible Tomcat 8.0.3 issue

2014-03-13 Thread Howard W. Smith, Jr.
On Thu, Mar 13, 2014 at 11:47 AM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Felipe, On 3/13/14, 10:57 AM, Felipe Jaekel wrote: There are lots of this in catalina log: *12-Mar-2014 08:41:43.828 WARNING [http-nio-80-exec-28]

Site down for maintenance senario

2014-03-12 Thread John Smith
Is there a straightforward way to toggle or add something in Tomcat, in the event a webapp is intentionally taken 'offline for maintenance? The user would receive the same single notification page saying as much, for any and all requests. Tomcat 7.0.42

Re: NIO connector - connections and threads

2014-03-10 Thread John Smith
Smith tomcat.ran...@gmail.com: Sorry, forgot: Tomcat 7.0.42 On Fri, Mar 7, 2014 at 3:59 PM, John Smith tomcat.ran...@gmail.com wrote: The NIO connector has two attributes from the standard HTTP Connector implementation, maxConnections and maxThreads with defaults of 1 and 200

Executor thread pool

2014-03-10 Thread John Smith
How dumb am I being by not using an Executor with a named thread pool? Currently I just have a Connector in server.xml: Connector port=8080 protocol=org.apache.coyote.http11.Http11NioProtocol connectionTimeout=2 redirectPort=8443 / Assuming ~2000

Re: NIO connector - connections and threads

2014-03-10 Thread John Smith
On Mon, Mar 10, 2014 at 11:48 AM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: John Smith [mailto:tomcat.ran...@gmail.com] Subject: Re: NIO connector - connections and threads Don't top post. So are the open HTTP connections that use my web application code waiting

Re: NIO connector - connections and threads

2014-03-10 Thread John Smith
Collecting some peak usage data might be interesting. You definitely want your max thread limit to be a bit above the number of concurrent requests you're handling. Of course, that has to be balanced against limits on other resources, such as memory and data base connections. - Chuck

Re: Tomcat7w.exe

2014-03-10 Thread Howard W. Smith, Jr.
On Sun, Mar 9, 2014 at 3:53 PM, Leo Donahue donahu...@gmail.com wrote: On Fri, Mar 7, 2014 at 12:43 PM, Howard W. Smith, Jr. smithh032...@gmail.com wrote: Actually, i hate clicking on things... I use Windows keyboard shortcuts as much as possible. Even when you run the following

Re: Tomcat7w.exe

2014-03-10 Thread Howard W. Smith, Jr.
On Mon, Mar 10, 2014 at 10:37 AM, Jeffrey Janner jeffrey.jan...@polydyne.com wrote: -Original Message- From: Leo Donahue [mailto:donahu...@gmail.com] Sent: Friday, March 07, 2014 11:10 AM To: users@tomcat.apache.org Subject: Tomcat7w.exe Did I miss something in the

Re: NIO connector - connections and threads

2014-03-08 Thread John Smith
Sorry, forgot: Tomcat 7.0.42 On Fri, Mar 7, 2014 at 3:59 PM, John Smith tomcat.ran...@gmail.com wrote: The NIO connector has two attributes from the standard HTTP Connector implementation, maxConnections and maxThreads with defaults of 1 and 200, respectively. Can anyone shine some

Re: Tomcat7w.exe

2014-03-07 Thread Howard W. Smith, Jr.
On Fri, Mar 7, 2014 at 1:11 PM, Leo Donahue donahu...@gmail.com wrote: I blame my lack of command line upbringing for not catching that. I love my MS-DOS command-line days/upbringing (dating back to my first computer, 1986 Tandy 1000 SX, MS-DOS 5.0, maybe, and I don't remember using Windows

NIO connector - connections and threads

2014-03-07 Thread John Smith
The NIO connector has two attributes from the standard HTTP Connector implementation, maxConnections and maxThreads with defaults of 1 and 200, respectively. Can anyone shine some light on how these work together? If I'm allowing up to 1 connections, would that mean I only have 200

Re: java: src/network.c:441: Java_org_apache_tomcat_jni_Socket_send: Assertion failed

2014-03-05 Thread Howard W. Smith, Jr.
Chris, On Tue, Mar 4, 2014 at 4:18 PM, Christopher Schultz ch...@christopherschultz.net wrote: Dmitry, On 3/4/14, 2:48 AM, Dmitry Batiyevskiy wrote: Howard, My connector config is the following (i've already posted that): Connector port=8443 maxHttpHeaderSize=8192 maxThreads=15000

Re: Tomcat 7.0.52 NIO + Atmospere 1.0.18 damaged responses

2014-03-05 Thread Howard W. Smith, Jr.
On Wed, Mar 5, 2014 at 8:35 AM, Jan Dosoudil jan.dosou...@aura.cz wrote: Hi, we have application running on Tomcat 7.0.52 with Nio connector (a lot older versions too), it uses MyFaces (2.1.12), RichFaces (4.3.5), Atmosphere framework (1.0.18). Atmosphere framework is configured to use

Re: java: src/network.c:441: Java_org_apache_tomcat_jni_Socket_send: Assertion failed

2014-03-05 Thread Howard W. Smith, Jr.
On Mar 5, 2014 11:09 AM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Howard, On 3/5/14, 9:45 AM, Howard W. Smith, Jr. wrote: Chris, On Tue, Mar 4, 2014 at 4:18 PM, Christopher Schultz ch...@christopherschultz.net wrote

Re: Optimization on simple requests

2014-03-05 Thread John Smith
Chris, Thanks! Very helpful advice. Best, John On Tue, Mar 4, 2014 at 1:54 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 John, On 3/4/14, 1:17 PM, John Smith wrote: Tomcat 7.0.42 on RHEL6. Assume that Tomcat is serving

Re: Optimization on simple requests

2014-03-05 Thread Howard W. Smith, Jr.
On Tue, Mar 4, 2014 at 1:54 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 John, On 3/4/14, 1:17 PM, John Smith wrote: Tomcat 7.0.42 on RHEL6. Assume that Tomcat is serving only one jsp page. Say it just rewrites

Re: java: src/network.c:441: Java_org_apache_tomcat_jni_Socket_send: Assertion failed

2014-03-04 Thread Howard W. Smith, Jr.
GMT+02:00 Howard W. Smith, Jr. smithh032...@gmail.com: On Mon, Mar 3, 2014 at 11:22 AM, Christopher Schultz ch...@christopherschultz.net wrote: Dmitry, On 3/3/14, 6:06 AM, Dmitry Batiyevskiy wrote: Can you advice how we can find the problem in app/environment like this? What

Optimization on simple requests

2014-03-04 Thread John Smith
Tomcat 7.0.42 on RHEL6. Assume that Tomcat is serving only one jsp page. Say it just rewrites a parameter value from the querystring to the html within the jsp. Also assume that there are ~200,000 users attempting to access that page - say almost simultaneously. What are the most relevant

Re: java: src/network.c:441: Java_org_apache_tomcat_jni_Socket_send: Assertion failed

2014-03-03 Thread Howard W. Smith, Jr.
On Thu, Feb 20, 2014 at 11:00 AM, Dmitry Batiyevskiy dmitry.batiyevs...@ardas.dp.ua wrote: We have upgraded tomcat 7.0.42 to 7.0.50 We have an app which is built around atmosphere framework and uses websockets After upgrade tomcat instance which has only this app dies in few hours after

  1   2   3   4   5   6   7   8   9   10   >