Re: Unclear sentence in FailedRequestFilter's javadoc

2020-10-05 Thread Martin Grigorov
Hi Konstantin, On Mon, Oct 5, 2020 at 2:53 PM Konstantin Kolinko wrote: > пн, 5 окт. 2020 г. в 14:16, Martin Grigorov : > > > > Hi, > > > > What is the meaning of "addresses" at > > > https://github.com/apache/tomcat/blob/a0fb5f4b42c593fa566878dddfa213e5f3c9c499/java/org/apache/catalina/filters/

Re: A lot of EOFs when using NIO2 with HTTP2

2020-10-05 Thread Martin Grigorov
On Tue, Oct 6, 2020 at 9:30 AM Martin Grigorov wrote: > Hi, > > I face an issue with the NIO2 protocol. > When I increase the request rate to more than 500 requests per second it > starts failing with: > > 06-Oct-2020 09:18:19.964 FINE [https-jsse-nio2-8080-exec-6] > org.apache.coyote.http2.Http2

A lot of EOFs when using NIO2 with HTTP2

2020-10-05 Thread Martin Grigorov
Hi, I face an issue with the NIO2 protocol. When I increase the request rate to more than 500 requests per second it starts failing with: 06-Oct-2020 09:18:19.964 FINE [https-jsse-nio2-8080-exec-6] org.apache.coyote.http2.Http2UpgradeHandler.init Connection [1], State [NEW] 06-Oct-2020 09:18:19.9

Re: completely automated (for real) Let's Encrypt on embedded Tomcat

2020-10-05 Thread James H. H. Lampert
I'm coming into this conversation late, so what I say could be completely irrelevant, but when I recently set up an independent (i.e., not behind httpd) Tomcat server on one of our AWS EC2 instances, and could not get certbot to function at all, to save my life, I ended up using something calle

Re: completely automated (for real) Let's Encrypt on embedded Tomcat

2020-10-05 Thread Garret Wilson
On 10/5/2020 2:42 PM, Christopher Schultz wrote: … Sure, it can contain S3 credentials and you can pick-up your key and certificate (or, better yet, the whole keystore) there, but at that point you have "moved" the problem outside of Tomcat, right? No, not at all. The major problems are: 1. Ge

Re: completely automated (for real) Let's Encrypt on embedded Tomcat

2020-10-05 Thread Christopher Schultz
Garret, On 10/5/20 12:21, Garret Wilson wrote: > Thank you so much for replying, Chris. Responses below. > > On 10/5/2020 8:53 AM, Christopher Schultz wrote: >> Microservices won't work the way you want with Let's Encrypt. You have >> two options: >> >> 1. Hit Let's Encrypt every time you launch

Re: completely automated (for real) Let's Encrypt on embedded Tomcat

2020-10-05 Thread Garret Wilson
Thank you so much for replying, Chris. Responses below. On 10/5/2020 8:53 AM, Christopher Schultz wrote: Microservices won't work the way you want with Let's Encrypt. You have two options: 1. Hit Let's Encrypt every time you launch a new instance of the microservice to deploy a new certificate

Re: HTTP2: memory filled up fast on increasing the connections to 1000/2000 (Embedded tomcat 9.0.38)

2020-10-05 Thread Mark Thomas
On 05/10/2020 10:56, Arshiya Shariff wrote: > Hi All, > > Thank you so much Mark . > We tested the jars built from latest 9.0.x with 2000 / 5000 users > (connections) from JMeter , We see a very good improvement with the heap > usage Good news. As is the fact that the other errors have been

Re: completely automated (for real) Let's Encrypt on embedded Tomcat

2020-10-05 Thread Christopher Schultz
Garret, On 10/4/20 14:04, Garret Wilson wrote: > Hi, everyone. I'm back already. (I had intended to leave the list to > focus my efforts elsewhere, but … here I am again.) > > I just realized there is a big SSL problem for small applications, and I > want to fix it. First a little review of where

Re: Unclear sentence in FailedRequestFilter's javadoc

2020-10-05 Thread Konstantin Kolinko
пн, 5 окт. 2020 г. в 14:16, Martin Grigorov : > > Hi, > > What is the meaning of "addresses" at > https://github.com/apache/tomcat/blob/a0fb5f4b42c593fa566878dddfa213e5f3c9c499/java/org/apache/catalina/filters/FailedRequestFilter.java#L40 > ? > > "Parameter parsing does check content type of the re

Unclear sentence in FailedRequestFilter's javadoc

2020-10-05 Thread Martin Grigorov
Hi, What is the meaning of "addresses" at https://github.com/apache/tomcat/blob/a0fb5f4b42c593fa566878dddfa213e5f3c9c499/java/org/apache/catalina/filters/FailedRequestFilter.java#L40 ? "Parameter parsing does check content type of the request, so there should not be problems with *addresses* that

RE: HTTP2: memory filled up fast on increasing the connections to 1000/2000 (Embedded tomcat 9.0.38)

2020-10-05 Thread Arshiya Shariff
Hi All, Thank you so much Mark . We tested the jars built from latest 9.0.x with 2000 / 5000 users (connections) from JMeter , We see a very good improvement with the heap usage . But I see this exception printed multiple times , I am not sure why this occurs : Exception in thread "http-nio-