[ANN] Apache Tomcat 8.5.95 available

2023-10-16 Thread Christopher Schultz

The Apache Tomcat team announces the immediate availability of Apache
Tomcat 8.5.95.

Apache Tomcat 8 is an open source software implementation of the Java
Servlet, JavaServer Pages, Java Unified Expression Language, Java
WebSocket and JASPIC technologies.

Apache Tomcat 8.5.95 is a bugfix and feature release. The notable
changes compared to 8.5.94 include:

- Correct a regression in 8.5.94 that broke the Tomcat JBDC
  connection pool

- Correct a regression in 8.5.94 that broke HTTP compression

Please refer to the change log for the complete list of changes:
https://tomcat.apache.org/tomcat-8.5-doc/changelog.html

Downloads:
https://tomcat.apache.org/download-80.cgi

Migration guides from Apache Tomcat 7.x and 8.0:
https://tomcat.apache.org/migration.html

Please note that Tomcat 8.5.x will reach End-of-life (EOL) on 31 March 
2024. For more information please visit 
https://tomcat.apache.org/tomcat-85-eol.html


Enjoy!

- The Apache Tomcat team

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat 9 -> Intermittent 404 (3-4 fails in 20-30 million requests daily sometimes )

2023-10-16 Thread Christopher Schultz

Anurag,

On 10/15/23 04:48, Anurag Kumar wrote:


Hi, we are experiencing intermittent 404 errors with both GET and POST 
calls. These errors are quite rare and have proven difficult to 
reproduce in our testing environment. However, on our production system, 
we encounter 3-4 cases daily out of 20-30 million requests where a 404 
error appears in the Tomcat access logs, and the corresponding call 
fails to reach the mapped servlet. Interestingly, the same calls work 
perfectly just a few milliseconds before and after on the same node. 
This inconsistency is causing significant issues, especially when 
critical API calls fail and are not automatically retried.


Is there any open issue related to this problem that we should be aware of?


None that I know of personally.

Can you post your exact Tomcat version, your  configuration 
with any secrets removed and a little more background on the type of 
traffic you are seeing (e.g. HTTP/1.1 v h2, TLS or not, etc.). Are you 
able to tell if these failed requests are part of any kind of pipelined 
requests (HTTP Keep-Alive) or h2 single channels?


Understanding the network topology may be relevant, though its unlikely 
that any lb/rp is doing this, as you can see the logs on the Tomcat 
node. But it may change the way the requests are being handled based 
upon the type of connection between the lb/rp and Tomcat.


Have you double-checked that the URIs are clean and don't contain 
anything unexpected such as lookalike characters, etc.? I suspect this 
is not an issue since you said "critical API calls fail" which leads me 
to understand that you have legitimate customers reporting these 
failures, instead of just investigating unexpected entries in your log 
files.


Is your testing environment reasonably similar to production? What would 
happen if you were to reply a whole day's worth of production-requests 
through your testing environment?


Is there any pattern whatsoever in the failed requests? If you look at 
every failed request for all time, are they randomly distributed 
throughout your URI space, or do you find that some URIs are 
over-represented in your failure data? You may have so few failures that 
you can't draw any conclusions.


-chris

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



error valve

2023-10-16 Thread Mcalexander, Jon J.
Good afternoon all!

I have a question around the error valve. It mentions that if you want you can 
supply custom error pages that need to be relative to $CATALINA_BASE. My 
question is, just where should this go? Do you typically create an errors 
directory under $CATALINA_BASE and put those there?

Same with the  element you can add to the web.xml. Can this be set 
in the web.xml that is in the conf folder and does the location of the 
error.jsp or whatever page, have to relative to $CATALINA_BASE?

This is the one thing I have struggled with this afternoon, is nothing tells 
you just WHERE to put the error.jsp or whatever custom file.

Thank you!!! I appreciate everyone who helps!

Dream * Excel * Explore * Inspire
Jon McAlexander
Senior Infrastructure Engineer
Asst. Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.



Re: error valve

2023-10-16 Thread Mark Thomas

On 16/10/2023 23:04, Mcalexander, Jon J. wrote:

Good afternoon all!

I have a question around the error valve. It mentions that if you want you can 
supply custom error pages that need to be relative to $CATALINA_BASE. My 
question is, just where should this go? Do you typically create an errors 
directory under $CATALINA_BASE and put those there?


You can do that. There is no fixed location for these. It is whatever 
makes most sense for you.



Same with the  element you can add to the web.xml. Can this be set 
in the web.xml that is in the conf folder and does the location of the error.jsp or 
whatever page, have to relative to $CATALINA_BASE?


No. These are per web application so must be relative to the root of the 
web application. i.e. they need to be in your WAR / exploded directory. 
They could also be Servlets if the appropriate mapping is also present.


You probably don't want to put these in $CATALINA_BASE/conf/web.xml.

Mark




This is the one thing I have struggled with this afternoon, is nothing tells 
you just WHERE to put the error.jsp or whatever custom file.

Thank you!!! I appreciate everyone who helps!

Dream * Excel * Explore * Inspire
Jon McAlexander
Senior Infrastructure Engineer
Asst. Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: error valve

2023-10-16 Thread Mcalexander, Jon J.
Thank you Mark.


Dream * Excel * Explore * Inspire
Jon McAlexander
Senior Infrastructure Engineer 
Asst. Vice President 
He/His 
 
Middleware, Automation, and Packaging Services  
Wells Fargo Bank, N. A.|MAC/Mail Station: F4469-010 
Tel 515-988-2508 | Cell 515-988-2508 
Email: jonmcalexan...@wellsfargo.com

This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation

> -Original Message-
> From: Mark Thomas 
> Sent: Monday, October 16, 2023 5:21 PM
> To: users@tomcat.apache.org
> Subject: Re: error valve
> 
> On 16/10/2023 23:04, Mcalexander, Jon J. wrote:
> > Good afternoon all!
> >
> > I have a question around the error valve. It mentions that if you want you
> can supply custom error pages that need to be relative to $CATALINA_BASE.
> My question is, just where should this go? Do you typically create an errors
> directory under $CATALINA_BASE and put those there?
> 
> You can do that. There is no fixed location for these. It is whatever makes
> most sense for you.
> 
> > Same with the  element you can add to the web.xml. Can this
> be set in the web.xml that is in the conf folder and does the location of the
> error.jsp or whatever page, have to relative to $CATALINA_BASE?
> 
> No. These are per web application so must be relative to the root of the web
> application. i.e. they need to be in your WAR / exploded directory.
> They could also be Servlets if the appropriate mapping is also present.
> 
> You probably don't want to put these in $CATALINA_BASE/conf/web.xml.
> 
> Mark
> 
> 
> >
> > This is the one thing I have struggled with this afternoon, is nothing tells
> you just WHERE to put the error.jsp or whatever custom file.
> >
> > Thank you!!! I appreciate everyone who helps!
> >
> > Dream * Excel * Explore * Inspire
> > Jon McAlexander
> > Senior Infrastructure Engineer
> > Asst. Vice President
> > He/His
> >
> > Middleware Product Engineering
> > Enterprise CIO | EAS | Middleware | Infrastructure Solutions
> >
> > 8080 Cobblestone Rd | Urbandale, IA 50322
> > MAC: F4469-010
> > Tel 515-988-2508 | Cell 515-988-2508
> >
> >
> jonmcalexan...@wellsfargo.com
> > This message may contain confidential and/or privileged information. If you
> are not the addressee or authorized to receive this for the addressee, you
> must not use, copy, disclose, or take any action based on this message or any
> information herein. If you have received this message in error, please advise
> the sender immediately by reply e-mail and delete this message. Thank you
> for your cooperation.
> >
> >
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org