-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Tarek,
On 10/30/18 03:13, Ahmed, Tarek wrote: > Thanks for your input! > > To summarize: Most of us seem to prefer not to have too many web > applications running in one tomcat instance. If, however, it is > possible to run a tomcat with many applications in a stable way it > reduces administrative overhead to do so. The prerequisites for > this are that the applications are mature, handle resources well > and don't get too many updates (we _do_ regular dependency updates, > though ...). > > On the other hand, if there is - for whatever reason - a regular > need of restarts or re-deployments or if the applications deployed > need individual monitoring or special care or whatever, there is a > case for one application per tomcat. > > What do I make of this? There might be a compromise here: Identify > those applications that don't cause trouble and put them into one > tomcat instance. Everything else (new applications, buggy ones no > one bothers to fix anymore, applications that get regular feature > updates etc.) are isolated in their own tomcat instances. As soon > as those become stable we can move them to (one of) the fat > tomcat(s). > > Sounds like something I might get through :-) > > Thanks and greetings, tarek > > Am 29.10.18 um 09:00 schrieb Ahmed, Tarek: >> >> Hi all, >> >> TLDR? Do you deploy one web application per tomcat instance or >> several? >> Has anyone ever attacked one of your web applications? There are some fun ways to make an application use a huge amount of memory. Just because the applications themselves are behaving doesn't mean that all the users are behaving. For example, do you have a max POST size set for your application? If not, I can send your login form a username that is so long it might exhaust your heap. 2147483647 characters is a LOT of characters. If you have a max POST size, maybe you don't filter-out PUT requests, and have Tomcat parsing those for you. Same problem, there. Just some thing to think about. Most web applications haven't really been exercised by someone who knows what might break it. Can you afford for those applications to take each other down because the JVM becomes unstable? Maybe and maybe not. - -chris -----BEGIN PGP SIGNATURE----- Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlvYlTwACgkQHPApP6U8 pFi2uQ/+JTpVnGKJkQTRDyq4XQIXERDmTRJ0ZlIc8z3pFgjGq3QePvjq+EF5c8Vi O7SCHnti/z/PMNTjLVsDH+Z828BV7nvIteD3+AzG5YQoWTavTeaq/LHPKdvUX/DP 1UDWPYNeFzpp7+bbt0aLlRgO488WaZeYjqwNHlyyLilnqgJbLIw477BmKFXDS+ur 16hUWzti1Hjt6anuQhNavZQPU88UuRNU0GiY4+7ns+kq8to+qxqJS8soP9RNPJ5a FvS/YwpyMSDcNelzWrADAsEaqA8A0p0iBUFhB05kPPh3xjKAA2qt8p1P6EBgcWgo JUP4KUh2wGpD6izluVS6TDBtJunMoI9mMGhwgfyLHs6G0sH6e4c3YSxsMxWbCn9A vWwFyKF4qfDDKsaX9DJ5m4ldsxvWtB3/5PZ4AmYf9HqsiCz9k6zzANBnbL2sMos6 jKuqyF34ahFV5MX0SnN6DUtCUSOkqWK0BcBAK5kUevt9/ouwUnssti4cKBNQiRFy Ss1YGfbf8m6JJ14K2BqteCLe1tekDJ8z9uPzqug9QNqJ5T4pLAYM6eXkpTXfDjtQ pyqPKRR+YAHRqcbCeva/D85DVXFDIvXoIJVvW7lvZXAve6zwHzYFr5JO4lizFXXW RZepakYb7Kph9GIPsDPhISr2PqwLY+wCVVpRRuLDvCW1K6Xk2i8= =/x7Y -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
