I think I found a larger part of the puzzle with the OpenSSL support for
tomcat, it looks like when using the ssl config provided below (directly
from Let's encrypt in this case) in your server.xml you can consume a large
amount of a server's CPU.
<Certificate certificateKeyFile="conf/localhost-rsa-key.pem"
certificateFile="conf/localhost-rsa-cert.pem"
certificateChainFile="conf/localhost-rsa-chain.pem"
type="RSA" />
If you use this config and you attempt to connect using IE8, it will fail
to load the page on the client and kill one core of your box until you
restart.
Can someone attempt to reproduce this? It works against the manage app
(https://.../manager/html)
I was able to replicate using this site if you don't have an XP box laying
around.
http://netrenderer.com/index.php
My setup is Ubuntu 16.04, tomcat 8.5.3 and Oracle Java 1.8.0_101-b13
Thanks
On Mon, Aug 22, 2016 at 9:40 AM, Chuck Syperski <csyper...@gmail.com> wrote:
> Hello,
>
> I am having an issue with a product box running tomcat 8.5.3 consuming a
> high percent of CPU cycles on a single core at what seems like random
> intervals (typically days apart), trigger by nothing other than a simple
> http get request. This didn’t happen when I was using the 8.0.x branch with
> SSL using a JKS. I have switched to using the OpenSSL method in 8.5.3 as
> well (see configuration below), so I don’t know if that could contribute to
> the issues I am having
>
> <Certificate certificateKeyFile="conf/localhost-rsa-key.pem"
> certificateFile="conf/localhost-rsa-cert.pem"
> certificateChainFile="conf/
> localhost-rsa-chain.pem"
> type="RSA" />
>
> I’ve gone years without any issue until recently (with the general changes
> outlined above). When the issue is occuring I noticed when looking at
> “top” the “system” cpu percent is higher then the user space percent (ie:
> 30% us, 50% sys), and it stays pretty stable at the split. This will
> continue until I restart tomcat, and I found that undeploying my webapp
> didn’t stop the run away cpu, only restarting tomcat would stop the
> process.
>
> I’m running ubuntu 16.04, with java version "1.8.0_101"
>
> I understand there isn’t a lot of details to go on here, I’ve included my
> thread dump and jstack below:
>
> jstack - http://pastebin.com/5Y2C5hzu
>
> threaddump - http://pastebin.com/n9Rkybwv
>
> Any pointers as to where to look next would be appreciated, as I’m a bit
> stuck as to what I should look at next.
>
