Re: [SECURITY] CVE-2017-12617 Apache Tomcat Remote Code Execution via JSP upload

Mark, Do you know if tomcat 5.x and 6.x are vulnerable to this issue? I know they are not supported, but are they exploitable by this vulnerability? Thx Mike On 3 October 2017 at 11:55, Mark Thomas wrote: > CVE-2017-12617 Apache Tomcat Remote Code Execution via JSP Upload > > Severity: Import

RE: JMX currentThreadsBusy less than connections/requests when use APR connector

Our production usage also has same phenomenon that my "currentThreadsBusy" always not high (3-5), but my "currentThreadCount" will go to 200-300 sometimes. I know that at some busy time, more threads will be created, so the thread pool get high, but at the same time, the busy threads will also

RE: FW: tomcat 8080 thread not reduced

eped alive sockets count: 1 Current thread count: 23 I want to know if these 23 threads are free to use, or they are active, cannot accept new connection? Here are Keeped alive sockets count, it's only 1, is this 1 for the busy thread or a thread in 23? -Smith -Original Message- Fr

RE: FW: tomcat 8080 thread not reduced

atus -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Thursday, January 19, 2017 4:38 PM To: Tomcat Users List Subject: Re: FW: tomcat 8080 thread not reduced -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Smith, On 1/18/17 8:25 PM, smith wrote: > I

RE: FW: tomcat 8080 thread not reduced

tell us the correct active threads count. In another email thread, you said if use , it will tell us the right active thread count not just busy count, right? -smith -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Wednesday, January 18, 2017 3:

Re[2]: FW: tomcat 8080 thread not reduced

08:00 发件人 André Warnier (tomcat) a...@ice-sa.com : >On 18.01.2017 10:56, smith wrote: >> Hi, André >> >> Thanks for the great explanation. So the current thread count will grow >> always until it reaches to the max configuration. >> >> I have another strange

Re[2]: FW: tomcat 8080 thread not reduced

thanks, our monitor is getting the result from the tomcat manager page which provides the busy threads count and totol threads count -- 从myMail的Android专用app所发送 星期三, 18 一月 2017, 06:08下午 +08:00 发件人 André Warnier (tomcat) a...@ice-sa.com : >On 18.01.2017 10:56, smith wrote: >>

RE: FW: tomcat 8080 thread not reduced

hich are different, than what applies to your case (which consists of direct HTTP connections from browsers, to the tomcat HTTP connector). So Philippe's case introduces probably an additional level of complexity into the equation. semi-graphically : smith case : client <- HTTP -> t

RE: FW: tomcat 8080 thread not reduced

. So Philippe's case introduces probably an additional level of complexity into the equation. semi-graphically : smith case : client <- HTTP -> tomcat HTTP connector - tomcat thread Philippe's case : client <- HTTP -> apache httpd + ajp module <- AJP -> tomcat AJP

RE: Re: FW: tomcat 8080 thread not reduced

e the number of 'idle' workers back from the highest value it had reached. Le 2017-01-16 à 05:24, André Warnier (tomcat) a écrit : > On 16.01.2017 11:10, smith wrote: >> We has same problem on dev env that no any traffic to the serive, > > Ah. That is /new/ information, whic

RE: FW: tomcat 8080 thread not reduced

Thanks chris So the tomcat default executor will not reduce the thread count until it reach to the max configuration? Will it reduce when it reach to max? And why the default not reduce the thread? -Smith -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net

RE: FW: tomcat 8080 thread not reduced

wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Smith, > > There are your only active s: > > On 1/14/17 1:30 AM, smith wrote: >> > connectionTimeout="2" redirectPort="8443" /> >> >> [snip] >> >> >

RE: FW: tomcat 8080 thread not reduced

thread not reduced -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Smith, There are your only active s: On 1/14/17 1:30 AM, smith wrote: > connectionTimeout="2" redirectPort="8443" /> > > [snip] > > You have not changed any settings from the default.

RE: FW: tomcat 8080 thread not reduced

16.01.2017 09:50, smith wrote: > Busy one is process customer request, do not know what non-busy one is > doing, always keep 120 for many days. I don't think 20s timeout will > not cause so long connection > > -smith And did you actually try it ? We do not know your website or you

RE: FW: tomcat 8080 thread not reduced

Busy one is process customer request, do not know what non-busy one is doing, always keep 120 for many days. I don't think 20s timeout will not cause so long connection -smith -Original Message- From: André Warnier (tomcat) [mailto:a...@ice-sa.com] Sent: Monday, January 16, 2017

Re[2]: FW: tomcat 8080 thread not reduced

0 >seconds) ? > >Do you still see the number of threads remaining at the maximum ? > >See : >http://tomcat.apache.org/tomcat-8.0-doc/config/http.html#Standard_Implementation >--> connectionTimeout >and the fact that it is

RE: FW: tomcat 8080 thread not reduced

- From: André Warnier (tomcat) [mailto:a...@ice-sa.com] Sent: Friday, January 13, 2017 10:42 AM To: users@tomcat.apache.org Subject: Re: FW: tomcat 8080 thread not reduced On 13.01.2017 09:38, smith wrote: > > > > > From: smith [mailto:smith@zoom.us] > Sent: Tuesday, Januar

FW: tomcat 8080 thread not reduced

From: smith [mailto:smith@zoom.us] Sent: Tuesday, January 10, 2017 9:57 AM To: 'users' Subject: tomcat 8080 thread not reduced Hi, We have installed Apache Tomcat/8.0.14, and found that after one period of time, the thread count for 8080(our port published) goes

Re: CONFIRM unsubscribe from users@tomcat.apache.org

dont remove From: Felix Schumacher To: users@tomcat.apache.org Sent: Thursday, July 7, 2016 1:02 PM Subject: Re: CONFIRM unsubscribe from users@tomcat.apache.org Am 07.07.2016 um 20:01 schrieb users-h...@tomcat.apache.org: > Hi! This is the ezmlm program. I'm managing the > users@to

Using MANIFEST.MF in Tomcat 8

context or am I limited to the WEB-INF/lib directory only for supporting jar files? Regards, Andy Smith

Re: Tomcat & SOAP/Rest +/- jax-ws or Axis2 or cxf ????

On Sun, Nov 1, 2015 at 2:31 AM, N.s.Karthik wrote: > Hi > spec : jdk 1.7 > Container Tomcat 7.x > O/s : Oracle Linux > > Question : Need a *Simple & Single Framework to support both "SOAP & Rest"* > based services. > > Which one is the best to make use of ?? > > Jax-ws OR Axis2 OR Cxf or

Re: Tomcat 8 reliability/performance on Windows 2008 R2 Server vs. RHEL/CentOS

On Thu, Oct 1, 2015 at 11:46 AM, Aurélien Terrestris wrote: > I recommend Linux for 2 reasons : > - easier to install and maintain a secured Tomcat (especially when > using different TOMCAT_HOME & TOMCAT_BASE, on Windows it's pretty > difficult to know how to secure all directories correctly) ;

Re: Is Container Managed Transactions possible in case of Tomcat ?

On Aug 19, 2015 3:56 PM, "Sreyan Chakravarty" wrote: > > TomEE supports Apache OpenJPA. What if I wanted to use Hibernate as my JPA > provider ? > I searched Google for tomee hibernate tutorial And found http://tomee.apache.org/examples-trunk/jpa-hibernate/README.html https://rmannibucau.word

Re: Tomcat Maven plugin failure: tries to use a TLSv1 handshake with a TLSv1.2 server.

chultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Stu, > > On 3/5/15 2:23 AM, Stu Smith wrote: > > Hello, > > > > I'm using the tomcat maven plugin to deploy to an SSL-enabled host. > > I've pointed maven at copy of the

Tomcat Maven plugin failure: tries to use a TLSv1 handshake with a TLSv1.2 server.

Hello, I'm using the tomcat maven plugin to deploy to an SSL-enabled host. I've pointed maven at copy of the keystore used on the tomcat server itself, so all the keys should be there. Also, I enabled java.net.ssl.debug=all, and confirmed the public key, intermediate cert, and CA cert are loade

SSL Root Cert install

I'm running Apache Tomcat 7 on Windows Server 2008 R2 with Java jdk 1.8.0_25. I was able to use the keytool.exe command with the -genkey switch to create a keystore. I then used keytool.exe to create a CSR which I submitted to an issuer and received a certificate. I have to use keytool.exe to impor

Re: Excessive threads crashing tomcat

Tomcat7 Java1.7_025 On 21 October 2014 20:06, Smith, Mitchell wrote: > Hi > > I have an issue where my applicaion servers have recently started failing > with OOM - cannot create native thread errors. However the dump files all > show he majority of threads (over 90%) lik

Excessive threads crashing tomcat

Hi I have an issue where my applicaion servers have recently started failing with OOM - cannot create native thread errors. However the dump files all show he majority of threads (over 90%) like the following: "pool-21088-thread-1" - Thread t@36407 > >java.lang.Thread.State: WAITING > at sun.

Re: Windows Tomcat install folder

> > > I don't know about the "recommended" way, but personally I hate the > SPACE in "Program Files", so I definitely prefer the 2nd option. > Same, I don't even bother with the second level directory. I just install to c:\apache-tomcat...

Re: Tomcat Connection Pool Problems with XtraBackup

On Sun, Oct 12, 2014 at 5:56 AM, Stefan Mayr wrote: > Hi John, > > Am 11.10.2014 23:30, schrieb John Smith: > >> I'm trying to workout a managed backup scheme on a MySQL production >> database with XtraBackup. According to our DBA, XtraBackup doesn't lock >&

Tomcat Connection Pool Problems with XtraBackup

I'm trying to workout a managed backup scheme on a MySQL production database with XtraBackup. According to our DBA, XtraBackup doesn't lock the database, but issues a series of SHOW TABLE STATUS commands and then works on the file system level. Still, just as XtraBackup runs my logs start to blow

Re: Daily catalina.out has thousands of NPEs

> > > > You haven't really provided any information, here. Please post full > stack traces. > > You might want to do something like catch NPE around the area(s) where > they are being thrown, and log information about the requests that are > causing them. It may be something like a web search crawl

Re: java.lang.IllegalArgumentException at java.nio.Buffer.limit

How would you use a proxy to do that? On Mon, Aug 18, 2014 at 3:23 PM, Yogesh Rao wrote: > How about tracing the http request and response for the call made? > > Tip : adding a proxy wud help here to log the entire request. > > Regards, > -Yogesh > > On Monday, Aug

Daily catalina.out has thousands of NPEs

TC 7.0.54, RHEL 6, JDK 1.7.0_60. I have two RH servers with one instance of TC on each, set up for clustering. There's a HWLB routing 80 to 8080 with 5 min sticky sessions. My daily catalina logs are set up to just show SEVERE errors, every day they average about *30mb* per server with the same se

Re: java.lang.IllegalArgumentException at java.nio.Buffer.limit

On Fri, Aug 8, 2014 at 9:10 AM, John Smith wrote: > On Thu, Aug 7, 2014 at 5:28 PM, Filip Hanik wrote: > >> if you could capture the XML that you are trying to write, we can put it >> into a test case and reproduce. >> >> Filip >> > > I&#x

Re: java.lang.IllegalArgumentException at java.nio.Buffer.limit

> > > > What's on line 182 of AbstractServlet.java? > > -Terence Bandoian > It's the "out.write(xml);" line.

java.lang.IllegalArgumentException at java.nio.Buffer.limit

TC 7.0.54 / RHEL 6 / JDK 1.7.0_60 I'm getting a pretty consistent error in my logs that started showing up recently. I use logback and have a servlet catch all 500 errors and log them. The error seems to be associated with one servlet that writes XML output. Two changes I made recently were imple

Re: JKS keystore password Encryption

> > You may find Wiki also useful: > > http://wiki.apache.org/tomcat/FAQ/Password > > -Ognjen "Write your own datasource implementation which wraps your datasource and obscure your brains out (XOR and ROT13 are great

Re: Restricting SSL access within webapp

All, Thanks for the thoughtful advice and replies. To answer a few questions, belatedly, yes it would be an option to move the admin tools to another instance of TC, as Leo suggested -- in a way a better one, since it wouldn't need session replication, could exist on a single server since the traf

Re: Restricting SSL access within webapp

On Fri, Aug 1, 2014 at 4:34 PM, Caldarale, Charles R < chuck.caldar...@unisys.com> wrote: > > From: John Smith [mailto:tomcat.ran...@gmail.com] > > Subject: Restricting SSL access within webapp > > > What's the correct way to selectively restrict https to only

Re: SSL redirect problems

> > > > TLS is layer 5 so if the LB is operating at layer 4 it can't host the > cert. Some LBs can operate at layer 5 so it will depend on your LB > and/or its configuration. > > Mark > > I see. That's good to know. The LB is at 7.

Re: SSL redirect problems

> > > Thanks for letting us know what the issue was; many people never come back > and tell us what fixed it. > > My pleasure. This list is awesome.

Restricting SSL access within webapp

In my webapp there's a directory '/admin' that's protected under SSL. Users are forced to use SSL via a security constraint in web.xml. It works great. As mentioned in the docs and other places, it would be good to prevent SSL everywhere else on the site, but I searched around and couldn't find an

Re: SSL redirect problems

> > >> There is no response, since you are not even able to connect to that > IP:port. > If you are using the IP of the LB, then the LB is not accepting > connections on port 8443. > You won't get much further, unless you solve that first. > But I thought that you wanted your users to access via p

Re: SSL redirect problems

> > >> > Is your LB configured to listen on 8443, or on 443? It won't pick up the > port it's supposed to listen on from the TC instances; you have to specify > it. > > Nailed it. Simplest solution, I didn't even consider it. Thanks, John

Re: SSL redirect problems

> > > As your testing keep this process in mind. If you encounter a problem just > try to break down the flow from your browser to the server and back. If > you look at the request at each hop through this process, you can often > find where things went wrong. For example, did the request hit th

Re: SSL redirect problems

> > >>> No, I am not really going that far. I am suggesting that that may be > the kind of thing that is happening, and that you may want to investigate > with a browser plugin, that the requests/responses are really what you are > expecting. > Your initial explanation was a bit confusing and lack

Re: SSL redirect problems

On Fri, Aug 1, 2014 at 11:54 AM, Mark Thomas wrote: > On 01/08/2014 16:30, Daniel Mikusa wrote: > > You probably want the SSL certificate installed on your hardware load > > balancer. End client's browsers are going to connect to the hardware > load > > balancer, not Tomcat. Thus you'd want the

Re: SSL redirect problems

>> Not contradicting anything Daniel is saying, but maybe something to add, > and maybe that's the missing part of the original puzzle : > > If Tomcat is expecting HTTPS requests on port 8443, then any re-direct or > response that it is sending back is going to include that port number after > the

Re: SSL redirect problems

> > > TC 7.0.54 / RHEL 6 > > > > I have two physical servers, each running an instance of TC. The servers > > are behind a hardware loadbalancer. IPTables is routing request on 80 to > > 8080. > > > This seems unnecessary. If you have a hardware load balancer in front of > Tomcat, it is the only t

SSL redirect problems

TC 7.0.54 / RHEL 6 I have two physical servers, each running an instance of TC. The servers are behind a hardware loadbalancer. IPTables is routing request on 80 to 8080. Tomcat runs under a non-root user. All good. I needed to protect an area of our webapp under SSL. Went ahead and installed the

Re: TC7 and SSL Questions

On Thu, Jul 24, 2014 at 6:24 PM, Ognjen Blagojevic < ognjen.d.blagoje...@gmail.com> wrote: > John, > > > On 24.7.2014 21:11, John Smith wrote: > >> 1. Can I specify /admin/* as a security constraint url pattern so that >> only >> that directory runs under SS

TC7 and SSL Questions

TC 7.0.54 / JDK 1.7.0_60 / RHEL 6 My webapp is the only one on my TC install. It's in webapps/ROOT. Iptables routes 80 to 8080 and I'm using the NIO connector. There are two physical servers with that same webapp, using session replication. Everything works great. There's a subdirectory "/admin"

Silent failure to deploy or run from configuration descriptor

Apache Tomcat/7.0.28, Debian I have two configuration descriptors in /etc/tomcat7/Catalina/localhost/ One, solr.xml deploys correctly and fills catalina.out with lots of useful messages. The other fails silently to start (see below). I see the message "INFO: Deploying configuration descriptor"

Getting 405 status from local Tomcat on Windows

405 status. (the client works fine if connecting to the real server running tomcat 6 on an Ubuntu server.) I can find no place locally where verb filtering is being configured. Any idea will be greatly appreciated. Dave Smith Brindle Waye, Ltd. 866-522-9839 ext 823 Design-a-Course

Re: SSL on one subdirectory only.

> > > >> 2. With the SSL connector enabled, https://* is globally respected on the >> entire webapp. Do I need to manually check the URL/protocol to deny or >> redirect https to http outside of '/admin'? Is there any built in TC >> mechanism or suggested best practice to handle this? or should I no

Re: SSL on one subdirectory only.

On Tue, May 27, 2014 at 2:21 PM, Mark Thomas wrote: > On 27/05/2014 17:31, John Smith wrote: > > Tomcat 7.0.42, RHEL6, JDK1.7.0_25, Standalone TC configuration. IPTABLES > > route port 80 to 8080 > > > > I've got a subdirectory like 'www.mysite.com/admin

SSL on one subdirectory only.

Tomcat 7.0.42, RHEL6, JDK1.7.0_25, Standalone TC configuration. IPTABLES route port 80 to 8080 I've got a subdirectory like 'www.mysite.com/admin' that I want to put under FORM based authentication. That's clear enough, and I've got the java keytool cert working well enough on my dev box until I

Re: RES: Configuring limits of requests/sessions/threads in Tomcat

On Tue, Apr 1, 2014 at 9:30 PM, Frederik Nosi wrote: > If so, just put an nginx or such in front of you'r Tomcat, you dont need > an application server for that, it's just like using a tank to shoot a > mosquito :P Wow, LOL!

Re: Request for better deployment usability: should be able to specify context root inside war

On Mon, Mar 31, 2014 at 1:27 PM, Mark Eggers wrote: > As far as Glassfish versus Apache Tomcat goes, they address different use > cases. Glassfish is a J2EE application server. Apache Tomcat is a servlet > container. While you can convince Apache Tomcat to do a lot of things, at > some point it's

Re: [OT] timeout

On Mar 31, 2014 3:48 AM, "André Warnier" wrote: > > Howard W. Smith, Jr. wrote: >> >> On Sun, Mar 30, 2014 at 9:54 PM, Caldarale, Charles R < >> chuck.caldar...@unisys.com> wrote: >> >>>> From: Howard W. Smith, Jr. [mailto:smithh032...

Re: timeout

On Sun, Mar 30, 2014 at 9:54 PM, Caldarale, Charles R < chuck.caldar...@unisys.com> wrote: > > From: Howard W. Smith, Jr. [mailto:smithh032...@gmail.com] > > Subject: Re: timeout > > > > - and if that is not the reason, then find the person responsible for > the &

Re: timeout

On Sun, Mar 30, 2014 at 6:30 PM, André Warnier wrote: > - and if that is not the reason, then find the person responsible for the > in-between equipment and ask them why their junk closes the connection > before your application has a chance to respond 'junk'? please clarify the usage of the wo

Re: Can we increase the logging in localhost_access.log

> We see 404 error in localhost_access so this the place from where we can > dig into. > Is there any way we can enhance the logging/information in > localhost_access_log. > Or then how can debug what happens between user requests and 404 response,? > Outside of performance monitoring tools, you m

Re: PooledConnection.getConnection - Tomcat JDBC Pool

On Tue, Mar 25, 2014 at 9:54 AM, Filip Hanik wrote: > Please open a bug, and we will get this taken care of. I do have one > question,Aries library, on which call does it expect to return the > connection to the pool? XAConnection.close() or > XAConnection.getConnection().close(); ? > > Jonathan,

Re: Concurrency - Servlet created instances accessing static classes

> You must have been fun to have as a student. > Student is a vague term. Student of which grade, which subject? Student of a trade? Student of life? Unfortunately your lack of exactness means I can't understand your joke :) (I was an even worse employee) - John

Re: Concurrency - Servlet created instances accessing static classes

> First terminology problem: class X isn't instantiated here, an object of > type class X is instantiated. > As Matisse once said, exactitude is not truth. This sort of hair splitting isn't helpful. Say "Class X is instantiated" to a thousand programmers and they'll understand that it means an ins

Re: Concurrency - Servlet created instances accessing static classes

> > If the method is thread-safe - no issue. If it isn't thread-safe then > you have a problem. > > Mark > Thanks Mark - Clearly and succinctly explained. Best, John

Re: PooledConnection.getConnection - Tomcat JDBC Pool

> If that is the case the tomcat jdbc > pooling library handling the call incorrectly and its a bug. > I'd be suspect of this. Are you actually using *org.apache.tomcat.jdbc.pool*? Since it's a Tomcat module it seems an odd choice to use outside of Tomcat. http://docs.oracle.com/javase/7/docs/ap

Re: Detecting out-of-memory condition

On Mon, Mar 24, 2014 at 1:57 PM, Caldarale, Charles R < chuck.caldar...@unisys.com> wrote: > > From: James H. H. Lampert [mailto:jam...@touchtonecorp.com] > > Subject: Detecting out-of-memory condition > > > We have noticed that after a certain amount of continuous uptime, Tomcat > > eventually ru

Concurrency - Servlet created instances accessing static classes

I should know this, but I want to confirm with smarter people on the board. Assume the following: 1. Servlet receives an HTTP POST request. doPost(...) is called. 2. doPost(..) instantiates class X with each request 3. Class X calls a static method of class Y Assuming I have no synchronization in

Re: Effects of turning off sendFile in the NIO connector

> > John > > The consequences for disabling sendFile are extremely hard to quantify > as there are so many variables. I would normally expect there to be more > CPU load but how much more? No idea. It might be impossible to detect, > it might leaver your CPUs pegged at 100%. > > The only way you wi

Re: Effects of turning off sendFile in the NIO connector

> > > MG>when you enable sendfile support with request attr > org.apache.tomcat.sendfile.support = true > MG>You will need to set these 3 header attributes > > org.apache.tomcat.sendfile.filename: Canonical filename of the file which > will be sent as a String > org.apache.tomcat.sendfile.start: S

Effects of turning off sendFile in the NIO connector

What effect would setting useSendfile=false have on a web application using the NIO connector? I'm asking because I may want to use gzip compression in the connector. The docs state: *"There is a tradeoff between using compression (saving your bandwidth) and using the sendfile feature (saving your

Re: Possible Tomcat 8.0.3 issue

On Mon, Mar 17, 2014 at 4:14 PM, Felipe Jaekel wrote: > My Tomcat 7 was running fine with this script, but last friday morning I > started Tomcat 8 setting only this: > *-Xms2048m -Xmx2048m -XX:MaxPermSize=1024m > -Dorg.apache.el.parser.COERCE_TO_ZERO=false* > and the applications crashed too. >

Re: Hosting recommendations

On Mon, Mar 17, 2014 at 10:25 AM, Mikolaj Rydzewski wrote: > On 17.03.2014 15:15, John Smith wrote: > > 1. Yes, we have ~500,000 visitors per day, and the site is based around a >> very popular game that is very data intensive (users creating, browsing >> and >>

Re: Hosting recommendations

On Mon, Mar 17, 2014 at 9:55 AM, Mark Thomas wrote: > On 17/03/2014 13:41, John Smith wrote: > > We're getting killed by our hosting provider (RS) over bandwidth issues. > I > > swear we scoped this out but somehow were over our agreement by an > alarming > > amo

Re: tomcat-native libraries

> > > Installing the native library will make a difference. Whether the > difference is large enough to notice depends very much on your > application. If you want to improve your application's performance I > suspect your time would be better spent with a profiler to see where the > bottlenecks ar

Hosting recommendations

We're getting killed by our hosting provider (RS) over bandwidth issues. I swear we scoped this out but somehow were over our agreement by an alarming amount. Our daily bandwidth looks like this: http://s17.postimg.org/btl0sj3jz/rs_traffic.png That's ~4T/day in bandwidth. I know it's a little ou

Re: Site down for maintenance senario

> Deploy a ROOT web application whose 404 page says "Down for > maintenance". You could even customize this kind of thing to only > respond to certain URL-prefixes (like [ROOT]/mywebapp/*). > > What will you do while Tomcat is restarting, though, if you have to > restart? > > Restarts take about a

Re: Possible Tomcat 8.0.3 issue

On Thu, Mar 13, 2014 at 11:47 AM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Felipe, > > On 3/13/14, 10:57 AM, Felipe Jaekel wrote: > > There are lots of this in catalina log: *12-Mar-2014 08:41:43.828 > > WARNING [http-nio-80

Re: Possible Tomcat 8.0.3 issue

On Thu, Mar 13, 2014 at 9:33 AM, burghard.britzke < b...@charmides.in-berlin.de> wrote: > may be restarting the context would even be sufficient? May be the > FacesServlet has an issue which implementation are you using? which > version? which version of PrimeFaces? > > earlier, in the thread, he

Site down for maintenance senario

Is there a straightforward way to toggle or add something in Tomcat, in the event a webapp is intentionally taken 'offline for maintenance"? The user would receive the same single notification page saying as much, for any and all requests. Tomcat 7.0.42

Re: Tomcat7w.exe

On Mon, Mar 10, 2014 at 10:37 AM, Jeffrey Janner < jeffrey.jan...@polydyne.com> wrote: > > -Original Message- > > From: Leo Donahue [mailto:donahu...@gmail.com] > > Sent: Friday, March 07, 2014 11:10 AM > > To: users@tomcat.apache.org > > Subject: Tomcat7w.exe > > > > Did I miss something

Re: Tomcat7w.exe

On Sun, Mar 9, 2014 at 3:53 PM, Leo Donahue wrote: > On Fri, Mar 7, 2014 at 12:43 PM, Howard W. Smith, Jr. < > smithh032...@gmail.com> wrote: > > > > > Actually, i hate clicking on things... I use Windows keyboard shortcuts > as > > much as possible. >

Re: NIO connector - connections and threads

> > > Collecting some peak usage data might be interesting. You definitely want > your max thread limit to be a bit above the number of concurrent requests > you're handling. Of course, that has to be balanced against limits on > other resources, such as memory and data base connections. > > - C

Re: NIO connector - connections and threads

On Mon, Mar 10, 2014 at 11:48 AM, Caldarale, Charles R < chuck.caldar...@unisys.com> wrote: > > From: John Smith [mailto:tomcat.ran...@gmail.com] > > Subject: Re: NIO connector - connections and threads > > Don't top post. > > > So are the open HTTP connec

Executor thread pool

How dumb am I being by not using an Executor with a named thread pool? Currently I just have a Connector in server.xml: Assuming ~2000 simultaneous connections. Tomcat 7.0.42. RHEL6. Best, John

Re: NIO connector - connections and threads

Thanks for your reply. So are the open HTTP connections that use my web application code waiting in line to be processed by the available threads specified in maxThreads? Best, John On Sun, Mar 9, 2014 at 12:44 PM, Konstantin Kolinko wrote: > 2014-03-09 2:08 GMT+04:00 John Smith : > &

Re: NIO connector - connections and threads

Sorry, forgot: Tomcat 7.0.42 On Fri, Mar 7, 2014 at 3:59 PM, John Smith wrote: > The NIO connector has two attributes from the standard HTTP Connector > implementation, maxConnections and maxThreads with defaults of 1 and > 200, respectively. > > Can anyone shine some lig

NIO connector - connections and threads

The NIO connector has two attributes from the standard HTTP Connector implementation, maxConnections and maxThreads with defaults of 1 and 200, respectively. Can anyone shine some light on how these work together? If I'm allowing up to 1 connections, would that mean I only have 200 threads

Re: Tomcat7w.exe

On Fri, Mar 7, 2014 at 1:11 PM, Leo Donahue wrote: > I blame my lack of command line upbringing for not catching that. > I love my MS-DOS command-line days/upbringing (dating back to my first computer, 1986 Tandy 1000 SX, MS-DOS 5.0, maybe, and I don't remember using Windows way back at that ti

Re: Optimization on simple requests

On Tue, Mar 4, 2014 at 1:54 PM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > John, > > On 3/4/14, 1:17 PM, John Smith wrote: > > Tomcat 7.0.42 on RHEL6. > > > > Assume that Tomcat

Re: Optimization on simple requests

Chris, Thanks! Very helpful advice. Best, John On Tue, Mar 4, 2014 at 1:54 PM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > John, > > On 3/4/14, 1:17 PM, John Smith wrote: > > Tomcat 7.0.42

Re: java: src/network.c:441: Java_org_apache_tomcat_jni_Socket_send: Assertion failed

On Mar 5, 2014 11:09 AM, "Christopher Schultz" wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Howard, > > On 3/5/14, 9:45 AM, Howard W. Smith, Jr. wrote: > > Chris, > > > > On Tue, Mar 4, 2014 at 4:18 PM, Christopher

Re: Tomcat 7.0.52 NIO + Atmospere 1.0.18 damaged responses

On Wed, Mar 5, 2014 at 8:35 AM, Jan Dosoudil wrote: > Hi, > we have application running on Tomcat 7.0.52 with Nio connector (a lot > older versions too), it uses MyFaces (2.1.12), RichFaces (4.3.5), > Atmosphere framework (1.0.18). Atmosphere framework is configured to use > long-polling with Tom

Re: java: src/network.c:441: Java_org_apache_tomcat_jni_Socket_send: Assertion failed

Chris, On Tue, Mar 4, 2014 at 4:18 PM, Christopher Schultz < ch...@christopherschultz.net> wrote: > Dmitry, > > On 3/4/14, 2:48 AM, Dmitry Batiyevskiy wrote: > > Howard, My connector config is the following (i've already posted > > that): > > > > > enableLookups="false" disableUploadTimeout="tru

Optimization on simple requests

Tomcat 7.0.42 on RHEL6. Assume that Tomcat is serving only one jsp page. Say it just rewrites a parameter value from the querystring to the html within the jsp. Also assume that there are ~200,000 users attempting to access that page - say "almost simultaneously". What are the most relevant opti

Re: java: src/network.c:441: Java_org_apache_tomcat_jni_Socket_send: Assertion failed

> SSLCertificateKeyFile="/opt/tomcat/mycompany.com.key" /> > Okay, thanks. > Also -Dhttps.protocols=TLSv1 option is passed to java machine > > The reason for me to use apr connector is https performance, isn't NIO much > slower in that? > Chris r

Re: java: src/network.c:441: Java_org_apache_tomcat_jni_Socket_send: Assertion failed

On Mon, Mar 3, 2014 at 11:22 AM, Christopher Schultz < ch...@christopherschultz.net> wrote: > Dmitry, > > On 3/3/14, 6:06 AM, Dmitry Batiyevskiy wrote: > > Can you advice how we can find the problem in app/environment like > > this? What are possible ways to debug this? > > Honestly, I'd try switc

  1   2   3   4   5   6   7   8   9   10   >