Re: Virtual Thread Configuration In Tomcat 11

2023-09-05 Thread William Crowell
Chris, Great post earlier today! This is a super interesting topic to me. You can find the performance testing results located here: http://ec2-18-188-185-212.us-east-2.compute.amazonaws.com:8080/web-report/ I did 10 runs with 1000 threads with a ramp up time of 3 seconds for a duration of 20

Re: Virtual Thread Configuration In Tomcat 11

2023-09-05 Thread Christopher Schultz
William, On 8/24/23 09:50, William Crowell wrote: I did some performance testing with virtual threads on Apache Tomcat 11.0.0-M10 and JDK 21 (21+35-2513). I have a simple REST service using Spring 6.0.11 that does an insert into MySQL 8.0.32. I have 3 separate boxes all running Rocky Linux 9.2

Re: Virtual Threads

2023-09-05 Thread Christopher Schultz
Mark, On 9/5/23 15:55, Mark Thomas wrote: On 05/09/2023 20:38, Christopher Schultz wrote: All, I have some questions about Virtual Threads and their use within Tomcat. Note that only Tomcat 11 currently has support for Virtual Threads when running on a version 19 or later JVM. Not quite. A

Re: [External] Re: Supporting Proxy Protocol in Tomcat

2023-09-05 Thread Mark Thomas
On 04/09/2023 15:41, Jonathan S. Fisher wrote: Mark thank you again for your leadership and setting expectations. I'm going to commit to working on this with anyone else that wants to help with the goal of a patch by year end. I want to nail the patch with minimal rework that meets Tomcat project

Re: Virtual Threads

2023-09-05 Thread Mark Thomas
On 05/09/2023 20:38, Christopher Schultz wrote: All, I have some questions about Virtual Threads and their use within Tomcat. Note that only Tomcat 11 currently has support for Virtual Threads when running on a version 19 or later JVM. Not quite. All current versions support virtual threads

Re: CIS Tomcat 8 Benchmark (v1.1.0) -- Questions

2023-09-05 Thread Christopher Schultz
Mark, Robert, et al, On 9/5/23 11:26, Mark Thomas wrote: I spoke to some CIS representatives at a recent conference given that I have concerns about the quality of some of the recommendations. It appears that these benchmarks are effectively crowdsourced. My primary concern is that there is n

Virtual Threads

2023-09-05 Thread Christopher Schultz
All, I have some questions about Virtual Threads and their use within Tomcat. Note that only Tomcat 11 currently has support for Virtual Threads when running on a version 19 or later JVM. My (admittedly limited) understanding is that the use of Virtual Threads, specifically within Tomcat, wi

Re: CIS Tomcat 8 Benchmark (v1.1.0) -- Questions

2023-09-05 Thread Robert Turner
Thanks Mark -- I appreciate your insights, and I agree with not donating your time so someone else can make money off it. It definitely seems somewhat unethical on their part not to make those resources available for free if they are sourcing them for free. I would imagine it's still easy enough to

Re: [External] Re: Supporting Proxy Protocol in Tomcat

2023-09-05 Thread Christopher Schultz
Jon, On 9/4/23 10:41, Jonathan S. Fisher wrote: Mark thank you again for your leadership and setting expectations. I'm going to commit to working on this with anyone else that wants to help with the goal of a patch by year end. I want to nail the patch with minimal rework that meets Tomcat proje

RE: [External] Re: Supporting Proxy Protocol in Tomcat

2023-09-05 Thread Amit Pande
Thank you, Jonathan, for updating this thread. I was thinking of cleaning up the existing patch and submit it for review. I agree it's better to get feedback before any work is started. Thanks, Amit -Original Message- From: Jonathan S. Fisher Sent: Monday, September 4, 2023 9:42 AM To:

Re: CIS Tomcat 8 Benchmark (v1.1.0) -- Questions

2023-09-05 Thread Mark Thomas
I spoke to some CIS representatives at a recent conference given that I have concerns about the quality of some of the recommendations. It appears that these benchmarks are effectively crowdsourced. My primary concern is that there is no validation of the resulting recommendations so they run

Re: CIS Tomcat 8 Benchmark (v1.1.0) -- Questions

2023-09-05 Thread Robert Turner
Thanks Peter. Just to be clear that I have no concern about the goal of the test -- only the method for obtaining the information, and the "implied" correction. After going through the rest of the document I was provided, it seems to "get more modern" as the questions go on -- suggesting the metho

Re: CIS Tomcat 8 Benchmark (v1.1.0) -- Questions

2023-09-05 Thread Peter Kreuser
Robert, While Mark Thomas will have a more detailled answer to this... The finding behind this test is valid (information disclosure with server version in responses), though the remediation listed here is from looong time ago, when the was no ErrorReportValve to purge the version info. So the

CIS Tomcat 8 Benchmark (v1.1.0) -- Questions

2023-09-05 Thread Robert Turner
While I think I know the answer to my question, I wanted to double-check with the group to confirm. I have been asked to perform the CIS Apache Tomcat 8 Benchmark (v1.1.0) on our production Tomcat installation, and I am looking through the questions / information extraction requests, and I suspect