ActiveMQ 5.16.x Master/Slave topology question

2021-11-29 Thread Vilius Šumskas
Hi, I‘m trying to setup a simple ActiveMQ 5.16.x master/slave cluster using shared filesystem option. I just need one broker running at any given time and a slave for HA. The filesystem part is clear and I have already configured it according to ActiveMQ requirements. What I don’t understand

RE: ActiveMQ 5.16.x Master/Slave topology question

2021-11-30 Thread Vilius Šumskas
, whatever), and you configure kahadb to point on the same filesystem in activemq.xml 2. On client side, you can failover:(master,slave) on the brokerURL to allow client to automatically switch to “new” master Regards JB > Le 29 nov. 2021 à 21:54, Vilius Šumskas a > écrit : > >

RE: ActiveMQ 5.16.x Master/Slave topology question

2021-11-30 Thread Vilius Šumskas
ome the new master - your clients will automatically reconnect to brokerB - you start brokerA, it's now a slave (as the lock is on brokerB) Regards JB On 30/11/2021 09:45, Vilius Šumskas wrote: > Thank you for your response! > > Just out of curiosity, what is this masterslave:() transpor

RE: ActiveMQ 5.16.x Master/Slave topology question

2021-12-01 Thread Vilius Šumskas
users@activemq.apache.org Subject: Re: ActiveMQ 5.16.x Master/Slave topology question On Tue, 2021-11-30 at 17:20:31 +0100, Vilius Šumskas wrote: >[...] > As an alternative, does anybody know if I can use non-HTTP SSL load balancer > and set client URI to something like ssl://loadbalancer_ho

RE: ActiveMQ 5.16 and log4j vulnerabilities

2021-12-13 Thread Vilius Šumskas
Hi, log4j 1.2 series are vulnerable to CVE-2019-17571 which has a CVSS score of 9.8. This needs to be addressed too. -- Vilius -Original Message- From: Jean-Baptiste Onofré Sent: Monday, December 13, 2021 11:50 AM To: users@activemq.apache.org Subject: Re: ActiveMQ 5.16 and log4j

running Artemis under non-root user

2021-12-27 Thread Vilius Šumskas
expected). Is there a way to run Artemis under non-root user, and if yes, how? -- Best Regards, Vilius Šumskas Advantes technologies IT manager

RE: running Artemis under non-root user

2021-12-27 Thread Vilius Šumskas
x27;re trying to run Artemis? I assume you're not just running the `artemis` command from the bin directory. Justin On Mon, Dec 27, 2021 at 6:34 AM Vilius Šumskas wrote: > Hello, > > I‘m trying to configure Artemis 2.20.0 to run under non-root user. So > far searchi

RE: running Artemis under non-root user

2021-12-30 Thread Vilius Šumskas
run ActiveMQ Artemis as service on linux is using systemd. Your example LGTM indeed yout service configuration includes the `User` and `Group` settings, can you share the SELinux denial message? Basic SELinux Troubleshooting in CLI https://access.redhat.com/articles/2191331 Regards, Domeni

RE: running Artemis under non-root user

2021-12-30 Thread Vilius Šumskas
.com/articles/2191331 Regards, Domenico On Thu, 30 Dec 2021 at 17:33, Vilius Šumskas wrote: > Hi, > > not sure why you say artemis-service is for Windows. For me it looks > like every normal init.d script written in bash. I would gladly run it > via system, like I did it with

Artemis cluster topology and external clients

2022-01-03 Thread Vilius Šumskas
pointers are much appreciated. -- Best Regards, Vilius Šumskas Advantes technologies IT manager +370 614 75713

RE: Artemis cluster topology and external clients

2022-01-04 Thread Vilius Šumskas
ng and use static connectors, i.e. (tcp://external-cluster-dns-1:61616,tcp://external-cluster-dns-2:61616)?ha=true&reconnectAttempts=30&useTopologyForLoadBalancing=false Regards, Domenico On Mon, 3 Jan 2022 at 10:00, Vilius Šumskas wrote: > Hello list, > > we are trying to us

RE: Artemis cluster topology and external clients

2022-01-07 Thread Vilius Šumskas
topology for load balancing and use static connectors, i.e. (tcp://external-cluster-dns-1:61616,tcp://external-cluster-dns-2:61616)?ha=true&reconnectAttempts=30&useTopologyForLoadBalancing=false Regards, Domenico On Mon, 3 Jan 2022 at 10:00, Vilius Šumskas wrote: > Hello list,

RE: Artemis cluster topology and external clients

2022-01-10 Thread Vilius Šumskas
Hi list, does anyone have more ideas regarding the issue with external consumers below? -- Vilius -Original Message- From: Vilius Šumskas Sent: Friday, January 7, 2022 11:43 AM To: users@activemq.apache.org Subject: RE: Artemis cluster topology and external clients We are still

RE: Artemis cluster topology and external clients

2022-01-12 Thread Vilius Šumskas
JIRA issue to track this need, and we can peek into how difficult it is to resolve or if there are some alternatives that can help this use case. On Mon, 10 Jan 2022 at 14:21, Vilius Šumskas wrote: > > Hi list, > > does anyone have more ideas regarding the issue with external cons

RE: Artemis cluster topology and external clients

2022-01-12 Thread Vilius Šumskas
ient to do transparent failover. On Wed, 12 Jan 2022 at 12:55, Vilius Šumskas wrote: > > Thanks, Gary. Ticket created > https://issues.apache.org/jira/browse/ARTEMIS-3640 > > We experimented a little bit more with this and found that if we use any of > the following parameters fa

RE: Artemis cluster topology and external clients

2022-01-13 Thread Vilius Šumskas
and I don't see a randomise option in there On Wed, 12 Jan 2022 at 21:49, Vilius Šumskas wrote: > > Thank you! We will try to apply your suggestions. > > One last thing, as I understood the proper URL string for external clients > then would be: > (tcp://external-cluster

RE: Difficulties finding libaio

2022-01-27 Thread Vilius Šumskas
Hi, most of the distributions have libaio packaged and ready. You just need to "dnf install" or "apt-get" it in your container image. -- Vilius -Original Message- From: Matthew Harris Sent: Thursday, January 27, 2022 11:14 PM To: users@activemq.apache.org Subject: Difficulties fi

RE: Artemis high availability in Kubernetes

2022-02-10 Thread Vilius Šumskas
Hi, +1 from me on the recommendations regarding Artemis on Kubernetes from core developers. I can only share how we are currently doing our HA. I've invested weeks of my time to investigate regarding having master/slave Artemis shared disk cluster with the following configurations: 1) Artemis

RE: Artemis share store config allow-failback= false question

2022-02-22 Thread Vilius Šumskas
At least under normal circumstances backup should be accessible via console. I just checked on my shared storage cluster. It even shows cluster diagram (without consumers and producers). Didn't try with allow-failback set to false though. -- Vilius -Original Message- From: Justin

RE: [EXTERNAL] Re: Artemis file locking not released

2022-02-28 Thread Vilius Šumskas
Are you using NFS version 4.1 and what's are your mount options? -- Vilius -Original Message- From: Gunawan, Rahman (GSFC-703.H)[Halvik Corp] Sent: Monday, February 28, 2022 2:55 PM To: users@activemq.apache.org Subject: RE: [EXTERNAL] Re: Artemis file locking not released The ba

RE: [EXTERNAL] Re: Artemis file locking not released

2022-02-28 Thread Vilius Šumskas
L] Re: Artemis file locking not released I'm using NFS v3. What is the recommended version? I don't see the minimum NFS requirement in https://activemq.apache.org/components/artemis/documentation/2.19.0/ha.html. Thanks Rahman -Original Message----- From: Vilius Šumskas Sent: Mond

ActiveMQ Artemis crashes with a lot of addresses/queues

2022-03-01 Thread Vilius Šumskas
RAM. Address memory is barely used ~12 MB. Or maybe we are doing something wrong? Maybe switching to temporary queues would help? -- Best Regards, Vilius Šumskas Rivile IT manager +370 614 75713

RE: ActiveMQ Artemis crashes with a lot of addresses/queues

2022-03-01 Thread Vilius Šumskas
.html [2] https://github.com/jbertram/artemis-prometheus-metrics-plugin On Tue, Mar 1, 2022 at 1:51 PM Vilius Šumskas wrote: > Hi, > > we have Artemis 2.20.0 cluster which is used by external > producers/consumers. Every such producer/consumer pair represents > different commerci

encoding passwords for JMS created accounts in Artemis

2022-03-21 Thread Vilius Šumskas
a way to use some kind of hashing or should we look at completely different SecurityManager provider for production purposes? We are using Artemis 2.20 with the default org.apache.activemq.artemis.spi.core.security.jaas.PropertiesLoginModule in the configuration. -- Best Regards, Vilius

RE: encoding passwords for JMS created accounts in Artemis

2022-03-21 Thread Vilius Šumskas
day, March 21, 2022 4:50 PM To: users@activemq.apache.org Subject: Re: encoding passwords for JMS created accounts in Artemis What do you mean by "JMS commands"? Justin On Mon, Mar 21, 2022 at 8:36 AM Vilius Šumskas wrote: > Hello, > > we are using JMS commands in our code

RE: encoding passwords for JMS created accounts in Artemis

2022-03-21 Thread Vilius Šumskas
olean parameter that indicates whether or not to hash the password. Justin On Mon, Mar 21, 2022, 10:13 AM Vilius Šumskas wrote: > I mean using activemq.management queue via > org.apache.activemq.artemis.api.jms.management.JMSManagementHelper. > > S

ActiveMQBasicSecurityManager configuration examples

2022-03-24 Thread Vilius Šumskas
t list all the users in the journal, or this is only possible calling some kind of API? 8. From the security perspective, are users’ passwords in binding journal properly hashed and cannot be retrieved if someone pokes at the data? Thank you in advance for any pointers. -- Best Regards,

RE: ActiveMQBasicSecurityManager configuration examples

2022-03-24 Thread Vilius Šumskas
ntralized repository for that (e.g. LDAP). Justin On Thu, Mar 24, 2022 at 11:01 AM Vilius Šumskas wrote: > Hello list, > > since, according to documentation, PropertiesLogin JAAS module is not > recommended for production use, and .properties files are not synched > in a clust

RE: ActiveMQBasicSecurityManager configuration examples

2022-03-24 Thread Vilius Šumskas
I to hash the passwords then they will be hashed. Hope that helps! Justin [1] https://activemq.apache.org/components/artemis/documentation/latest/security.html#basic-security-manager On Thu, Mar 24, 2022 at 11:01 AM Vilius Šumskas wrote: > Hello list, > > since, according to documentation,

RE: ActiveMQBasicSecurityManager configuration examples

2022-03-27 Thread Vilius Šumskas
journal which is optimized for speed, but I wouldn't expect the difference to be significant. Justin On Thu, Mar 24, 2022 at 3:56 PM Vilius Šumskas wrote: > Thank you for very detailed answers! This helps a lot actually. > > Follow-up question regarding item 5. We have an int

RE: ActiveMQBasicSecurityManager configuration examples

2022-03-29 Thread Vilius Šumskas
l testing. I would expect the basic security manager to be a bit faster since it uses the journal which is optimized for speed, but I wouldn't expect the difference to be significant. Justin On Thu, Mar 24, 2022 at 3:56 PM Vilius Šumskas wrote: > Thank you for very detailed answers!

RE: ActiveMQBasicSecurityManager configuration examples

2022-03-31 Thread Vilius Šumskas
in On Tue, Mar 29, 2022 at 10:49 PM Justin Bertram wrote: > I would say that's a bug. > > > Justin > > On Tue, Mar 29, 2022 at 4:58 PM Vilius Šumskas > > wrote: > >> Hello, >> >> >> Would you still advice to remove bootstrapUser configur

Is Artemis manage role global?

2022-04-01 Thread Vilius Šumskas
Hi, I‘m trying to understand how exactly Artemis roles work and I have a simple question: is “manage” role global? For example, if I use addSecuritySettings(), match the address to “somequeue.input.#” and add the role of the user to manageRoles attribute will the user then be able to send manag

RE: Is Artemis manage role global?

2022-04-04 Thread Vilius Šumskas
stop an acceptor, delete messages from a queue, create an address, etc.). Hope that helps! Justin On Fri, Apr 1, 2022 at 5:32 AM Vilius Šumskas wrote: > Hi, > > I‘m trying to understand how exactly Artemis roles work and I have a > simple question: is “manage” role global? For e

RE: ActiveMQBasicSecurityManager configuration examples

2022-04-04 Thread Vilius Šumskas
's worth, stale records will be removed from the journal by the compaction process which runs automatically during broker runtime or you can compact the journal manually using the "data compact" command. Justin On Thu, Mar 31, 2022 at 4:18 PM Vilius Šumskas wrote: > Looks

RE: ActiveMQBasicSecurityManager configuration examples

2022-04-04 Thread Vilius Šumskas
>> Yes, hashes should be stored somewhere, e.g. in surviving records, but >> my point was about operational journal. > > I don't understand what you mean. The "surviving records" are *in* the > "operational journal." The "data print" command simply lists the surviving > records as a convenience

RE: ActiveMQBasicSecurityManager configuration examples

2022-04-07 Thread Vilius Šumskas
>> Correct me if I'm wrong on my understandings. My proposal was to not > store hashes (or plaintext passwords) in b) type records. > As far as I can tell, you believe that "surviving records" and "operational > records" are two fundamentally different things which is, in fact, not the > case. A

RE: ActiveMQBasicSecurityManager configuration examples

2022-04-07 Thread Vilius Šumskas
ead from or written to the journal during authentication. The broker simply uses the data it has in memory. Justin On Thu, Apr 7, 2022 at 1:20 PM Vilius Šumskas wrote: > >> Correct me if I'm wrong on my understandings. My proposal was to > >> not > > store ha

RE: ActiveMQBasicSecurityManager configuration examples

2022-04-07 Thread Vilius Šumskas
ts. It wouldn't be very useful if it worked the way you describe. Justin On Thu, Apr 7, 2022 at 2:15 PM Vilius Šumskas wrote: > Wait, so does this mean that if I add or delete a user I have to > restart a broker for the ActiveMQBasicSecurityManager to pickup changes? &g

RE: Questions around security and permissions

2022-04-28 Thread Vilius Šumskas
Hi, we have very similar requirements. You can search this mailing list for my recent questions and answers from others for details. Basically we have chosen ActiveMQBasicSecurityManager as a backend, and we are creating users, their permissions and queues on-demand, using activemq.management

RE: Questions around security and permissions

2022-04-29 Thread Vilius Šumskas
Correct. This is exactly what we are doing. By the way, as far as we found out, permissions created on-demand will be stored in the journal independently which user/role storage mechanism you choose. That was one more reasons for us to go with ActiveMQBasicSecurityManager because we won't have

hide Artemis codec key from Hawtio console

2022-07-15 Thread Vilius Šumskas
Hawtio console -> Runtime. -- Best Regards, Vilius Šumskas Rivile IT manager +370 614 75713

RE: Critical error sending large messages to mysql

2022-09-15 Thread Vilius Šumskas
Hi, how large is the message? Have you checked max_allowed_packet configuration parameter, specifically https://dev.mysql.com/doc/mysql-replication-excerpt/8.0/en/replication-features-max-allowed-packet.html ? -- Vilius -Original Message- From: Stephen Baker Sent: Thursday, Sep

RE: Artemis vs AMQ 5.x in production

2022-09-29 Thread Vilius Šumskas
One additional note regarding HA and shared storage on K8s. Check what shared storage options are available in your K8S environment beforehand, because there are not so many, and both Artemis and “Classic” is pretty picky about shared storage filesystem. For example, for us, on Google Cloud, it

RE: Problem with Artemis auto-delete queues

2022-11-03 Thread Vilius Šumskas
Hi, we needed similar cleanup being made on our testing environment, but to keep data folder, so we have used this script: /var/lib/artemis/bin/artemis address show --url tcp://localhost:61616 --user admin --password adminpassword > addresses.txt while read -r queue; do ./artemis queue delete -

RE: Problem with Artemis auto-delete queues

2022-11-03 Thread Vilius Šumskas
P.S. You probably will need to remove (ignore) system addresses, like activemq.management, from the addresses.txt in order to keep them. -- Vilius From: Vilius Šumskas Sent: Friday, November 4, 2022 8:24 AM To: users@activemq.apache.org Subject: RE: Problem with Artemis auto-delete queues

RE: Problem with Artemis auto-delete queues

2022-11-04 Thread Vilius Šumskas
M: +1 7209385761 | john.lil...@redpointglobal.com<mailto:john.lil...@redpointglobal.com> From: Vilius Šumskas mailto:vilius.sums...@rivile.lt>> Sent: Friday, November 4, 2022 12:24 AM To: users@activemq.apache.org<mailto:users@activemq.apache.org> Subject: RE: Problem with Ar

reloading TLS certificate for Jolokia

2023-01-11 Thread Vilius Šumskas
reload() on „artemis-ssl“ acceptor, but I just cannot figure out a way to reload it for console itself. -- Best Regards, Vilius Šumskas Rivile IT manager

RE: reloading TLS certificate for Jolokia

2023-01-11 Thread Vilius Šumskas
hout restarting the broker? -- Vilius -Original Message----- From: Vilius Šumskas Sent: Wednesday, January 11, 2023 1:55 PM To: users@activemq.apache.org Subject: reloading TLS certificate for Jolokia Hi, since because of https://issues.apache.org/jira/browse/ARTEMIS-3117 ActiveMQ

RE: reloading TLS certificate for Jolokia

2023-01-11 Thread Vilius Šumskas
tart failed If not, could you perhaps get a thread dump? In any event, if you want to start the embedded web server you can do so using JMX directly (e.g. via JConsole). Just invoke the startEmbeddedWebServer operation on the ActiveMQServerControl MBean. Justin On Wed, Jan 11, 2023 at 6:41 AM Vil

RE: reloading TLS certificate for Jolokia

2023-01-12 Thread Vilius Šumskas
ver restart failed > > If not, could you perhaps get a thread dump? > > In any event, if you want to start the embedded web server you can do > so using JMX directly (e.g. via JConsole). Just invoke the > startEmbeddedWebServer operation on the ActiveMQServerControl MBe

RE: reloading TLS certificate for Jolokia

2023-01-12 Thread Vilius Šumskas
K if you are unable to restart Artemis broker at the same time. Else you will have problems later, for example when reloading Hawtio console for TLS certificate change. Thank you for your help Justin! -- Best Regards, Vilius -----Original Message- From: Vilius Šumskas Sent: Thurs

RE: Artemis - broker.xml configuration on Docker

2023-03-09 Thread Vilius Šumskas
Hi, depending on what you need to change, you could probably use 'bin/artemis create' to generate correct broker.xml in the first place. This is what docker-run.sh script with EXTRA_ARGS does. Check available options at https://activemq.apache.org/components/artemis/documentation/latest/using-s

RE: cloud-native deployment

2023-03-13 Thread Vilius Šumskas
Hi, check the mailing list archives. This question comes up regulary. -- Vilius -Original Message- From: prateekjai...@gmail.com Sent: Monday, March 13, 2023 11:46 AM To: users@activemq.apache.org Subject: cloud-native deployment Hi All, How are you? I am trying to deploy arte

RE: Artemis docker container readme wrong or defective?

2023-05-22 Thread Vilius Šumskas
Hi, you don't need whole repo, artemis-docker folder is enough. Regarding your docker error, you have to have Docker installed in order to build the image. I suspect you are running bash script from WSL, but environment doesn't have docker installed _inside_ WSL. -- Vilius -Original

There is a possible split brain on nodeID XXXXX after upgrade to 2.30

2023-09-01 Thread Vilius Šumskas
Hi, we have upgraded some of our environments from 2.28 to 2.30, others from 2.24 to 2.30 and all upgraded instances now show this strange log message during live node restart cycle: There is a possible split brain on nodeID 165c6eec-0429-11ed-a12a-42010a961402. Topology update ignored Full r

RE: There is a possible split brain on nodeID XXXXX after upgrade to 2.30

2023-09-03 Thread Vilius Šumskas
s long as your backup broker isn't running while your primary broker is running then there's no issue. FWIW, shared storage configurations are relatively immune to split brain due to the file locks enforced by the shared store. Justin On Fri, Sep 1, 2023 at 10:25 AM Vilius Šumskas w

RE: Native Oauth/OIDC integration in ActiveMQ

2023-11-01 Thread Vilius Šumskas
e at least some advanced configuration parameters to not kill the MQ system itself, like caching or similar. But we can always hope for better tomorrow :) -- Best Regards, Vilius Šumskas Rivile IT manager +370 614 75713 -Original Message- From: ski n Sent: Wednesday

RE: HA setup using shared store policy

2023-11-21 Thread Vilius Šumskas
You need to add you slave to on master (and master host to slave ). Command line doesn't do that automatically, it only creates initial configuration. -- Vilius -Original Message- From: Adrija Basu Sent: Tuesday, November 21, 2023 7:19 AM To: users@activemq.apache.org Subject: R

RE: REST Interface for Artemis Broker

2024-01-25 Thread Vilius Šumskas
I think you should consider adopting https://developers.google.com/search/blog/2009/02/specify-your-canonical or similar strategy, so that user search always points to the most up-to-date documentation. I've managed to stumble upon old version Artemis docs multiple times myself (especially on

RE: REST Interface for Artemis Broker

2024-01-25 Thread Vilius Šumskas
Version number in the HTML page title could help too I think: https://pasteboard.co/X78nH017BiGS.png -- Vilius -Original Message- From: Vilius Šumskas Sent: Thursday, January 25, 2024 12:26 PM To: users@activemq.apache.org Subject: RE: REST Interface for Artemis Broker I think

RE: HA failover: Nothing we try reduces client recovery below one minute

2024-02-21 Thread Vilius Šumskas
Hi, are you able to reproduce your issue without Kubernetes layer on Artemis instances? I’m not sure how exactly do you kill a pod, but 40 second timeout very much looks like default pod grace timeout + 10 seconds. -- Vilius From: John Lilley Sent: Wednesday, February 21, 2024 8:45 PM To:

RE: Disabled authentication ActiveMQ Classic Webapps since V6.x

2024-04-10 Thread Vilius Šumskas
Hi, oh, I remember this. This is exactly what I did in https://github.com/apache/activemq/commit/c67ada04c77e9379ef25ac62d5ea1fcf20cf8b8f , and at least /admin endpoint was tested and was properly protected after that fix. However, I see that configuration went through couple of changes again

RE: Disabled authentication ActiveMQ Classic Webapps since V6.x

2024-04-10 Thread Vilius Šumskas
. Looking forward to see the fix in next releases ;) Best regards -Ursprüngliche Nachricht- Von: Vilius Šumskas Gesendet: Mittwoch, 10. April 2024 13:34 An: users@activemq.apache.org Betreff: RE: Disabled authentication ActiveMQ Classic Webapps since V6.x Hi, oh, I remember this. This is

deletion of roles

2024-06-13 Thread Vilius Šumskas
Hi, just wondering, if I delete Artemis user, do I also need to somehow delete their role too? (assuming that this role is not used anywhere else) Or are roles just like “labels” on user objects and there is no need to delete them separately? -- Best Regards, Vilius Šumskas

RE: deletion of roles

2024-06-14 Thread Vilius Šumskas
on of roles As far as the broker is concerned I don't think there's any specific reason to delete roles. Of course, you may want to delete them for other reasons (e.g. the artemis-roles.properties file is taking up a bunch of disk space). Justin On Thu, Jun 13, 2024 at 2:34 AM Vilius

RE: deletion of roles

2024-06-14 Thread Vilius Šumskas
moving the user. Internally the roles are keyed off the user so when the user is removed the role entries for that user are removed as well. Justin On Fri, Jun 14, 2024 at 2:53 PM Vilius Šumskas wrote: > Hi, > > we use ActiveMQBasicSecurityManager so I assume roles are stored in >

RE: Recommendation on Azure Storage Class settings for the activemq-shared-store-pvc volume shared by both Artemis-HA instances

2024-10-06 Thread Vilius Šumskas
Hi, I cannot advice on other settings, but -nobrl is CIFS based flag. Assuming that you are using NFS and not SMB for your volume this flag will be of no use. -- Vilius -Original Message- From: Lino Pereira Sent: Friday, October 4, 2024 11:54 PM To: users@activemq.apache.org Subj

RE: backup not activated after OOM on primary

2025-01-06 Thread Vilius Šumskas
e the date has been flushed to disk, etc. In short, there _should_ never be any message/journal corruption. If there was then it would be considered a bug and it would be fixed. Justin On Thu, Jan 2, 2025 at 12:21 AM Vilius Šumskas wrote: > I will rephrase my question. Are the any exact dang

RE: backup not activated after OOM on primary

2025-01-01 Thread Vilius Šumskas
it and change the default behavior in a minor release. Justin On Wed, Jan 1, 2025 at 4:32 PM Vilius Šumskas wrote: > Are there any caveats adding +ExitOnOutOfMemoryError? Just wondering > why it's not in the default JAVA_ARGS in "artemis.profile". > > -- >

avoiding oom-killer on Artemis

2025-01-07 Thread Vilius Šumskas
. There is also a question of JVM Direct Memory and other memory sectors which are not controlled by heap settings. Does Artemis use those and what is recommended ratios for them? -- Best Regards, Vilius Šumskas Rivile IT manager

RE: avoiding oom-killer on Artemis

2025-01-08 Thread Vilius Šumskas
trics.html#optional-metrics [2] https://github.com/jbertram/artemis-prometheus-metrics-plugin On Wed, Jan 8, 2025 at 9:31 AM Vilius Šumskas wrote: > Thank you for your reply. > > VMs do not run anything else, just standard OpenSSH server and Google > Cloud Monitoring Agent. I assume that t

Artemis journal compacting when password masking enabled

2025-01-08 Thread Vilius Šumskas
2.34.0 produces the same result. What I’m doing wrong? -- Best Regards, Vilius Šumskas Rivile IT manager

RE: avoiding oom-killer on Artemis

2025-01-08 Thread Vilius Šumskas
lem occur on a console? If you run a "top" on that machine sorted by memory do you see other memory consumers?  Are those expected? Regards, David On Jan 8, 2025, 12:31 AM, at 12:31 AM, "Vilius Šumskas" wrote: >Hi, > >I‘m trying to configure our Artemis cluster

RE: JMX exporter in Docker image

2025-01-23 Thread Vilius Šumskas
JMX connection to a broker and it was able to browse MBeans no problem. Justin [1] https://github.com/prometheus/jmx_exporter On Tue, Jan 14, 2025 at 5:31 PM Vilius Šumskas wrote: > Yes, I've read documentation regarding JMX management, but I had > issues with configuration so decide

RE: JMX exporter in Docker image

2025-01-23 Thread Vilius Šumskas
rt-up. Do you know of any way I can reproduce what you're seeing? Justin [1] https://p.defau.lt/?WV75z6Vajriy_tmBpASMrg On Thu, Jan 23, 2025 at 3:50 AM Vilius Šumskas wrote: > >> ...the broker hangs on startup for ~2 minutes and 10 seconds every > time... > > > Can you get a th

RE: JMX exporter in Docker image

2025-01-26 Thread Vilius Šumskas
t sure how the JVM's MBean server avoids this. Feel free to open a Jira to track this. Justin On Thu, Jan 23, 2025 at 11:34 AM Vilius Šumskas wrote: > Can you try with -Djava.rmi.server.hostname=some.random.ip instead of > hostname? > > I tried with "foo" hostn

cannot disable temporary queue metrics

2025-01-27 Thread Vilius Šumskas
Hi, I‘ve set up Artemis Prometheus plugin 2.2.0 with ActiveMQ Artemis 2.39.0. /metrics endpoint works and returns all default metrics. Now I’m trying to disable metrics for temporary queues. I’ve followed documentation at https://activemq.apache.org/components/artemis/documentation/latest/addr

JMX exporter in Docker image

2025-01-14 Thread Vilius Šumskas
Hi, I‘m trying to configure JMX remoting in official Artemis Docker image. I see that Docker image has port 9404 exposed which indicates JMX Prometheus exporter, but I cannot find any information how to activate it or even the exporter JAR in the image itself. Is this a bug left from https://g

backup not activated after OOM on primary

2025-01-01 Thread Vilius Šumskas
/?nJvfQKdc4rrUGC9lL7_JCA OOM have happened at ~2:51 and the primary was in this state until I have restarted it ~13:25. Any pointers are much appreciated! -- Best Regards, Vilius Šumskas Rivile IT manager

RE: Artemis journal compacting when password masking enabled

2025-01-09 Thread Vilius Šumskas
to reproduce this issue? Thanks, Domenico On Thu, 9 Jan 2025 at 08:34, Vilius Šumskas wrote: > Hello, > > I’m trying to compact Artemis journal with ./artemis data compact > however no matter what I do I always get this error: > > [root@activemq-artemis-node-1 bin]# ./ar

RE: backup not activated after OOM on primary

2025-01-01 Thread Vilius Šumskas
orth passing this as well: -XX:+HeapDumpOnOutOfMemoryError This will allow you to do some post-mortem analysis and see exactly why the OOME occurred. Justin On Wed, Jan 1, 2025 at 12:17 PM Vilius Šumskas wrote: > Hi, > > we had an incident where our applications sent too much tr

RE: JMX exporter in Docker image

2025-01-14 Thread Vilius Šumskas
plugin - accessible via the web port 8161). Justin [1] https://activemq.apache.org/components/artemis/documentation/latest/management.html#remote-jmx-access [2] https://activemq.apache.org/components/artemis/documentation/latest/metrics.html#metrics On Tue, Jan 14, 2025 at 3:37 AM Vilius Šumskas wrote: &

RE: What HA Replication Policy Is For Active-Active Topology

2025-03-18 Thread Vilius Šumskas
Hi, active/active deployment you are talking about in Artemis world is just "group of brokers". It doesn't provide you HA by default, but two groups can be configured for HA. It's a little bit wasteful because you will have to add 3-4 broker to satisfy your requirements, but generally it works.

RE: What HA Replication Policy Is For Active-Active Topology

2025-03-19 Thread Vilius Šumskas
your reply. Can we do 2 broker clusters of 1 node each with HA on top? The HA piece only cares whether a cluster is defined and not necessarily if it is a health cluster. Regards, William Crowell From: Vilius Šumskas Date: Tuesday, March 18, 2025 at 8:23 AM To: users@activemq.apache.org Su

RE: how to separate permissions for replyTo temporary queues

2025-04-09 Thread Vilius Šumskas
9, 2025 at 8:37 AM Vilius Šumskas wrote: > Thanks. After some back and forth we have decided to use random UUID > temporary replyTo queues for now. Until PCI DSS or similar compliance > will require us to completely separate our clients. > > -- > Vilius > >

RE: how to separate permissions for replyTo temporary queues

2025-04-09 Thread Vilius Šumskas
eady doing most of the scanning work. It happens in its own thread and isn't CPU intensive. Also, consider that tracking & deleting a temporary queue isn't free either. You're essentially trading real-time clean-up with periodic clean-up. Justin On Tue, Apr 8, 20

RE: how to separate permissions for replyTo temporary queues

2025-04-11 Thread Vilius Šumskas
management client. The discussion was here: https://lists.apache.org/thread/4yp9n3tom9lk81hs1d3xgfwgld4cwhx0 I'm not sure if it is possible in your case. Maybe applications can be changed to use a particular address with random queue names. чт, 10 апр. 2025 г. в 14:29, Vilius Šumskas :

RE: 2.40.0 HAWTIO console design

2025-04-11 Thread Vilius Šumskas
se/ARTEMIS-5406?jql=project%20%3D%20ARTEMIS%20AND%20component%20%3D%20%22Web%20Console%22%20and%20status%20%3D%20Open%20 On Thu, 10 Apr 2025 at 13:39, Vilius Šumskas wrote: > First of all, thank you very much Andy for your hard work! Compared to > other brokers, like for example RabbitMQ

RE: limiting queue creation in JMS durable subscription flow

2025-04-18 Thread Vilius Šumskas
reated in response to a consumer. Justin On Thu, Apr 17, 2025 at 1:43 AM Vilius Šumskas wrote: > I would like to rephrase my question regarding createDurableQueue > permissions requirement. Is it required *by the consumer*? Can those > topic queues be created by the producer, or does

RE: IP address whitelisting for Artemis users

2025-04-18 Thread Vilius Šumskas
> > tcp:// > 10.0.0.1:61616?router=allow-privileged-users... > > tcp:// > 0.0.0.0:61616?router=deny-privileged-users... > > Domenico > > > > On Thu, 17 Apr 2025 at 13:55, Vilius Šumskas > wrote: > >> I'm trying to wrap my hea

RE: IP address whitelisting for Artemis users

2025-04-18 Thread Vilius Šumskas
ive router redirection is not used. The redirection allows to redirect a client connection to another target broker. In your case, the connection router is used to reject connections that don't match the local-target-filter and it works for all clients. Domenico On Fri, 18 Apr 2025 at 13:14, Vilius

RE: limiting queue creation in JMS durable subscription flow

2025-04-16 Thread Vilius Šumskas
mentation/latest/jms-core-mapping.html#mapping-jms-concepts-to-the-core-api [2] https://activemq.apache.org/components/artemis/documentation/latest/resource-limits.html#resource-limits On Wed, Apr 16, 2025 at 3:43 AM Vilius Šumskas wrote: > Hello, > > we have a pub/sub Java app which rel

RE: limiting queue creation in JMS durable subscription flow

2025-04-17 Thread Vilius Šumskas
queue name, for example "address-for-external-role::queue-for-subscription". чт, 17 апр. 2025 г. в 09:42, Vilius Šumskas : > I would like to rephrase my question regarding createDurableQueue > permissions requirement. Is it required *by the consumer*? Can those > topic

regex key support in management.xml

2025-04-22 Thread Vilius Šumskas
the same management policy to all system queues? -- Best Regards, Vilius Šumskas Rivile IT manager

RE: limiting queue creation in JMS durable subscription flow

2025-04-18 Thread Vilius Šumskas
on. Justin [1] https://activemq.apache.org/components/artemis/documentation/latest/resource-limits.html#resource-limits On Fri, Apr 18, 2025 at 6:20 AM Vilius Šumskas wrote: > I guess that makes sense. If client ID and subscription name is known > in advance, would you advise to create queues via manage

RE: regex key support in management.xml

2025-04-24 Thread Vilius Šumskas
g so in management.xml should also work. That said, I'd recommend using this key instead of what you originally proposed: key="queue=(DLQ|ExpireQueue)" Justin On Tue, Apr 22, 2025 at 4:39 AM Vilius Šumskas wrote: > Hello, > > as an additional measure to lockdown

RE: 2.40.0 HAWTIO console design

2025-04-10 Thread Vilius Šumskas
First of all, thank you very much Andy for your hard work! Compared to other brokers, like for example RabbitMQ or RocketMQ, or any pub/sub type cloud based implementation, Artemis management UI is lacking so ANY movement in that direction is much appreciated. Nevertheless, I think part of the

RE: how to separate permissions for replyTo temporary queues

2025-04-10 Thread Vilius Šumskas
); ... This is all off the top of my head so there might be some errors in there, but hopefully you get the idea. Let me know if you have further questions! Justin [1] https://activemq.apache.org/components/artemis/documentation/latest/wildcard-syntax.html#wildcard-syntax On Fri, Apr 4, 20

RE: how to separate permissions for replyTo temporary queues

2025-04-10 Thread Vilius Šumskas
User: com-testing does not have permission='SEND' on address d649d0ca-15de-11f0-a16a-42010a5aa004 [condition = amqp:unauthorized-access] -- Vilius -Original Message----- From: Vilius Šumskas Sent: Wednesday, April 9, 2025 10:02 PM To: users@activemq.apache.org Subject: RE:

  1   2   >