-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Bruce,

On 3/5/14, 1:11 PM, Bruce Weertman wrote:
> We have a load balancer talking with tomcat’s running on multiple 
> backend tomcat servers. The tomcats are running web service 
> applications. In doing testing, and as reported by customers, we 
> occasionally see refused connections. Not real often, but enough
> to be a head ache.
> 
> We’re not sure where the problem is coming from. Suspects include
> (1) firewall, (2) load balancer (3) tomcat and perhaps the (4) the
> web app.  The volume of traffic is so high, that it becomes a
> needle in a hay stack issue.

Can you describe your setup in a bit more detail? What kind of lb? How
many of them? Any fronting web server(s)? How many? How many Tomcat
instances?

What is/are your <Connector> configuration(s)?

> We are using the BIO connector and everything is HTTP. Our typical 
> hit rates are dozens per second.

Tomcat can certainly handle that kind of thing. If you have long
wait-times for your webapp, you might not be able to keep up.

> In my experimentation with Tomcat, if it runs out of threads and
> the accept queue fills, there is no indication in (for example) 
> catalina.out.> (see acceptCount and maxConnections in 
> http://tomcat.apache.org/tomcat-7.0-doc/config/http.html)

Tomcat usually complains if you run out of threads.

> In production maxConnections is the default of 200, but when
> looking at the number of connections being processed by tomcat it’s
> rarely more than a couple dozen per instance. There’s always the
> possibility that it occasionally spikes.

What is the resolution of the data you have? Are you sampling with
some regularity?

> Anyway, the question is:  Is there any good way to see if tomcat
> is going into a state where it’s not accepting connections? How
> would would I see this? Is it possible to see this ?

Sure: connect to a specific Tomcat. If you get a "connection refused",
then you are in this state.

Your load balancer should have a setting where you can choose a
back-end server explicitly if you want to go through the lb, or you
can just contact one directly.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=ZEI9
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to