Nice, I will try your JVM settings. By the way, the CPU reaches about 100% only with Java (CAS). Here my Tomcat configuration:
server.max-http-header-size=2097152 server.use-forward-headers=true server.connection-timeout=20000 server.error.include-stacktrace=NEVER server.compression.enabled=true server.compression.mime-types=application/javascript,application/json,application/xml,text/html,text/xml,text/plain server.tomcat.max-http-post-size=2097152 server.tomcat.min-spare-threads=20 server.tomcat.max-threads=200 server.tomcat.accept-count=1024 server.tomcat.max-connections=10000 server.tomcat.port-header=X-Forwarded-Port server.tomcat.protocol-header=X-Forwarded-Proto server.tomcat.protocol-header-https-value=https server.tomcat.remote-ip-header=X-FORWARDED-FOR server.tomcat.uri-encoding=UTF-8 Could you share your Tomcat configuration with me? I want to check if the CPU issue related to Tomcat misconfiguration or not On Sun, Jul 28, 2019 at 5:47 PM David Curry <[email protected]> wrote: > Well, I'm not too knowledgeable about Windows Server, but that seems > reasonable. Is the server in general at 90% CPU, or is it the actual Java > process that's at 90%? > > I don't run the embedded server so don't know its defaults -- What's the > Java heap size limited to? Should be less than the physical memory. What > garbage collector is it using? On our 4-core 16GB Linux servers we run this: > > jsvc.exec -Dcatalina.home=/opt/tomcat/latest > -Dcatalina.base=/opt/tomcat/latest -Djava.awt.headless=true > -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager > -Djava.util.logging.config.file=/opt/tomcat/latest/conf/logging.properties > -cp > /opt/tomcat/latest/bin/commons-daemon.jar:/opt/tomcat/latest/bin/bootstrap.jar:/opt/tomcat/latest/bin/tomcat-juli.jar > -pidfile /var/run/tomcat.pid -java-home /usr/lib/jvm/java-openjdk -user > tomcat -Xms512M -Xmx8192M -XX:+DisableExplicitGC -XX:+UseConcMarkSweepGC > -XX:+UseParNewGC -XX:MaxGCPauseMillis=500 -server > org.apache.catalina.startup.Bootstrap > > which is enough for CAS with Hazelcast ticket registry and the management > webapp (all in the same Tomcat process). We're also running a small mongod > (2gb cache size) on each server which handles the services registry. Most > of the time, the servers are idle or very close to it. > > Could you have something that takes a (relatively) long time that causing > the server to block? A slow LDAP, or slow database query, or something? We > had problems like that when we were using MongoDB as our ticket registry; > under heavy activity Mongo was too slow and the CAS threads would block > waiting on it to complete. It wasn't pretty. > > --Dave > > > -- > > DAVID A. CURRY, CISSP > *DIRECTOR • INFORMATION SECURITY & PRIVACY* > THE NEW SCHOOL • INFORMATION TECHNOLOGY > > 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003 > +1 646 909-4728 • [email protected] > > > On Sun, Jul 28, 2019 at 11:00 AM abdelrahman halawa < > [email protected]> wrote: > >> How many CPUs? >> *4X* Intel(R) Xeon(R) @ 2.40GHz, 2400 Mhz, 2 Core(s) >> How much memory? >> 16G >> What operating system? >> Windows Server 2012 >> What else is running on the server (nothing, hopefully)? >> Nothing >> Is the server paging or swapping (you don't want it to be)? >> The default of Windows Server >> >> >> >> On Sun, Jul 28, 2019 at 4:44 PM David Curry <[email protected]> >> wrote: >> >>> How many CPUs? >>> How much memory? >>> What operating system? >>> What else is running on the server (nothing, hopefully)? >>> Is the server paging or swapping (you don't want it to be)? >>> If you're running on Linux VMs, do you have an entropy source for the >>> crypto (you should)? >>> >>> >>> -- >>> >>> DAVID A. CURRY, CISSP >>> *DIRECTOR • INFORMATION SECURITY & PRIVACY* >>> THE NEW SCHOOL • INFORMATION TECHNOLOGY >>> >>> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003 >>> +1 646 909-4728 • [email protected] >>> >>> >>> On Sun, Jul 28, 2019 at 7:51 AM abdelrahman halawa < >>> [email protected]> wrote: >>> >>>> Hello all, >>>> >>>> I noticed that the CPU utilization of my CAS server reaches above 90% >>>> with only 75 concurrent users or maybe less. >>>> >>>> Has this happened with you as well? Any suggestions to overcome this? >>>> >>>> I use embedded Tomcat with default settings. >>>> >>>> Thanks in advance. >>>> >>>> -- >>>> - Website: https://apereo.github.io/cas >>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>> - List Guidelines: https://goo.gl/1VRrw7 >>>> - Contributions: https://goo.gl/mh7qDG >>>> --- >>>> You received this message because you are subscribed to the Google >>>> Groups "CAS Community" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to [email protected]. >>>> To view this discussion on the web visit >>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/fe73e941-cf70-4d77-a747-1f1c4d76a527%40apereo.org >>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/fe73e941-cf70-4d77-a747-1f1c4d76a527%40apereo.org?utm_medium=email&utm_source=footer> >>>> . >>>> >>> -- >>> - Website: https://apereo.github.io/cas >>> - Gitter Chatroom: https://gitter.im/apereo/cas >>> - List Guidelines: https://goo.gl/1VRrw7 >>> - Contributions: https://goo.gl/mh7qDG >>> --- >>> You received this message because you are subscribed to the Google >>> Groups "CAS Community" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> To view this discussion on the web visit >>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAPPO%3D_pb%3Dg7_f5T28aUWLWEkYpyTNn_p27cq5tZQqLcOw%40mail.gmail.com >>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAPPO%3D_pb%3Dg7_f5T28aUWLWEkYpyTNn_p27cq5tZQqLcOw%40mail.gmail.com?utm_medium=email&utm_source=footer> >>> . >>> >> >> >> -- >> Best regards, >> ------------------------------------ >> >> >> [image: photo] >> *Abdelrahman Halawa* >> Teacher Assistant, Computer and Systems Department, Al-Azhar University >> +2 01008131693 <+2+01008131693> | [email protected] | Skype: >> abdelrahmanhalawa <https://mail.google.com/mail/u/0/#> | Maadi, Cairo, >> Egypt >> <http://eg.linkedin.com/pub/abdelrahman-halawa/2b/689/886> >> <http://twitter.com/Abdelrahman_S_H> >> >> -- >> - Website: https://apereo.github.io/cas >> - Gitter Chatroom: https://gitter.im/apereo/cas >> - List Guidelines: https://goo.gl/1VRrw7 >> - Contributions: https://goo.gl/mh7qDG >> --- >> You received this message because you are subscribed to the Google Groups >> "CAS Community" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit >> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMKQGEb5aaQ6-vNkqsC_XfZt8Y0HN5H%3D6iFwPC%3DeHsa9hPu2oA%40mail.gmail.com >> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMKQGEb5aaQ6-vNkqsC_XfZt8Y0HN5H%3D6iFwPC%3DeHsa9hPu2oA%40mail.gmail.com?utm_medium=email&utm_source=footer> >> . >> > -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAO2bPNFfUdz6BCgyjA8tqrYWrgy__JmKd2H0ocAySkVYQ%40mail.gmail.com > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAO2bPNFfUdz6BCgyjA8tqrYWrgy__JmKd2H0ocAySkVYQ%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > -- Best regards, ------------------------------------ [image: photo] *Abdelrahman Halawa* Teacher Assistant, Computer and Systems Department, Al-Azhar University +2 01008131693 <+2+01008131693> | [email protected] | Skype: abdelrahmanhalawa <https://mail.google.com/mail/u/0/#> | Maadi, Cairo, Egypt <http://eg.linkedin.com/pub/abdelrahman-halawa/2b/689/886> <http://twitter.com/Abdelrahman_S_H> -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMKQGEYD6MKRnRjBo3XGfu0Z5MwKeDjCB9KO5MJzUzBrGQ0P7Q%40mail.gmail.com.
