Re: Some questions regarding the TLS1.2 port 443 continuously communicating and too many open threads

[Ragavendhiran Bhiman (rabhiman)]

Hi Mark,

We have configured 450 threads for port number 443 with the following executer 

<Connector
         port="443" protocol="org.apache.coyote.http11.Http11NioProtocol" 
SSLEnabled="true"
         maxKeepAliveRequests="-1"
         keepAliveTimeout="300000"
         executor="AdminExecutorPool"
         maxSavePostSize="-1"
         scheme="https" secure="true"
         enableLookups="false" disableUploadTimeout="true"
         acceptCount="100"
         compression="on"
         
compressableMimeType="text/html,text/json,text/javascript,text/css,application/javascript"
         sslEnabledProtocols="${sslEnabledProtocolsHighSecurity}" server=" "
         allowUnsafeLegacyRenegotiation="false"
         clientAuth="false"
         bindOnInit="false"
         URIEncoding="UTF-8"
         useBodyEncodingForURI="true"
         keystoreType="PKCS11"
         keyAlias="tomcat"
         truststoreType="PKCS11"
         sendReasonPhrase="true"
         
sslImplementationName="org.apache.tomcat.util.net.jsse.IseJSSEImplementation"
         
     />           

I could see 450 threads open for servicing the clients in one specific setup 
only what could be the reason?

Thanks a lot.

Regards,

Raghav
                              

On 29/04/20, 7:18 PM, "Mark Thomas" <ma...@apache.org> wrote:

    On 29/04/2020 14:24, Ragavendhiran Bhiman (rabhiman) wrote:
    > Apache version 8.5.29

    Given this is the Apache Tomcat mailing list and that that is a valid,
    although rather old, Tomcat version number I assume you mean you are
    using Apache Tomcat 8.5.29.

    Generally, please also include JVM vendor and version being used as well
    as OS.

    <snip/>

    > Hi,
    > 
    > I am seeing too many open threads to port number 443 with TLSv1.2, what 
could be the primary reason for the same?

    Open threads? That doesn't make sense. Do you mean open ports, threads
    (idle, active, both) or something else?

    How are you defining "too many"? More than you expect? There is an
    error? Something else?

    > How can I analyze the problem ? Any particular pointers if you could 
provide will be more helpful.

    That depends on what the problem turns out to be.

    Mark

    ---------------------------------------------------------------------
    To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
    For additional commands, e-mail: users-h...@tomcat.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org