Christopher Schultz wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Bruce,

On 3/5/14, 1:11 PM, Bruce Weertman wrote:
We have a load balancer talking with tomcat’s running on multiple backend tomcat servers. The tomcats are running web service applications. In doing testing, and as reported by customers, we occasionally see refused connections. Not real often, but enough
to be a head ache.

We’re not sure where the problem is coming from. Suspects include
(1) firewall, (2) load balancer (3) tomcat and perhaps the (4) the
web app.  The volume of traffic is so high, that it becomes a
needle in a hay stack issue.

Can you describe your setup in a bit more detail? What kind of lb? How
many of them? Any fronting web server(s)? How many? How many Tomcat
instances?

On which platform ? (OS)


What is/are your <Connector> configuration(s)?

We are using the BIO connector and everything is HTTP. Our typical hit rates are dozens per second.

Tomcat can certainly handle that kind of thing. If you have long
wait-times for your webapp, you might not be able to keep up.

In my experimentation with Tomcat, if it runs out of threads and
the accept queue fills, there is no indication in (for example) catalina.out.> (see acceptCount and maxConnections in http://tomcat.apache.org/tomcat-7.0-doc/config/http.html)

Tomcat usually complains if you run out of threads.

In production maxConnections is the default of 200, but when
looking at the number of connections being processed by tomcat it’s
rarely more than a couple dozen per instance. There’s always the
possibility that it occasionally spikes.

What is the resolution of the data you have? Are you sampling with
some regularity?

Anyway, the question is:  Is there any good way to see if tomcat
is going into a state where it’s not accepting connections? How
would would I see this? Is it possible to see this ?

Sure: connect to a specific Tomcat. If you get a "connection refused",
then you are in this state.

Your load balancer should have a setting where you can choose a
back-end server explicitly if you want to go through the lb, or you
can just contact one directly.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=ZEI9
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to