On Tue, Jun 5, 2012 at 6:05 PM, Garey Mills <[email protected]> wrote: > Andrea - > > I have some layers that I want to protect with our local centralized > authentication server (CAS) and some layers that I don't. My solution is to > install two Geoserver instances in one Tomcat and allow access to one only > through a CAS-protected Apache httpd with mod_jk. Each Geoserver has it's > own data directory. > > Besides the problem of how to restrict access to the secured Geoserver > via Tomcat's port, are there any problems with running two Geoservers in one > tomcat instance? The preceding posts in this thread sounded unsure.
Permgen exhaustion can be a problem, GeoServer uses a ton of it because it's made of a very large amount of classes. For reasons we could not determine, it also leask permgen, that, is, if you redeploy GeoServer without restarting tomcat the permgen memory used by GeoServer is not released. This means you cannot redeploy the two GeoServer instances independently, since the safe way to do that is to restart Tomcat. Another issue is vector rendering scalability, the Sun/Oracle java2d implementation is fast but scales poorly, and the synchronization lock is held at the JVM level, meaning that if you run two GeoServer in the same process they will synch out each other. That's why we normally deploy one Tomcat + GeoServer every 2 or 4 available cores, to ensure better scalability (see this presentation for details: http://demo.geo-solutions.it/share/foss4g2011/gs_steroids_sgiannec_foss4g2011.pdf) Cheers Andrea -- Ing. Andrea Aime GeoSolutions S.A.S. Tech lead Via Poggio alle Viti 1187 55054 Massarosa (LU) Italy phone: +39 0584 962313 fax: +39 0584 962313 mob: +39 339 8844549 http://www.geo-solutions.it http://geo-solutions.blogspot.com/ http://www.youtube.com/user/GeoSolutionsIT http://www.linkedin.com/in/andreaaime http://twitter.com/geowolf ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Geoserver-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/geoserver-users
