On Tue, 10 Apr 2001, Bojan Smojver wrote:
> > The code if the option "useDevRandom" is not set is the same as before.
> > If you set useDevRandom="true" then /dev/random will be used.
>
> Very cool. Where do I whack this option? server.xml? I know it must be a
> silly question to ask on Tomcat Dev list... :-)
<SessionIdGenerator useDevRandom="true"/>
> >From Tomcat's perspective it's really better to keep it open. It's going
> to run faster. I'm guessing all open streams get closed when Tomcat is
> shut down anyway, so that's fine.
>
> And thanks for acting so quickly on this!
Thanks for sending the patches :-)
Note that the option will be disabled by default ( I'm even thinking of
creating a new DevRandomGenerator and moving it in proposals, but the code
doesn't affect in any way "normal" random generation and is simple
enough).
The main question is what happens on high load - can /dev/random generate
randoms fast enough ? If not, probably we should use it only to initialize
the java random genearator.
Costin