Hi david.curry, How are youCould you tell me the Tomcat version you use? Also, If you don't mind, reply to the previous email
On Sun, Jul 28, 2019 at 6:36 PM abdelrahman halawa < [email protected]> wrote: > Nice, I will try your JVM settings. > By the way, the CPU reaches about 100% only with Java (CAS). > Here my Tomcat configuration: > > server.max-http-header-size=2097152 > server.use-forward-headers=true > server.connection-timeout=20000 > server.error.include-stacktrace=NEVER > server.compression.enabled=true > > server.compression.mime-types=application/javascript,application/json,application/xml,text/html,text/xml,text/plain > server.tomcat.max-http-post-size=2097152 > server.tomcat.min-spare-threads=20 > server.tomcat.max-threads=200 > server.tomcat.accept-count=1024 > server.tomcat.max-connections=10000 > server.tomcat.port-header=X-Forwarded-Port > server.tomcat.protocol-header=X-Forwarded-Proto > server.tomcat.protocol-header-https-value=https > server.tomcat.remote-ip-header=X-FORWARDED-FOR > server.tomcat.uri-encoding=UTF-8 > > Could you share your Tomcat configuration with me? > I want to check if the CPU issue related to Tomcat misconfiguration or not > > > On Sun, Jul 28, 2019 at 5:47 PM David Curry <[email protected]> > wrote: > >> Well, I'm not too knowledgeable about Windows Server, but that seems >> reasonable. Is the server in general at 90% CPU, or is it the actual Java >> process that's at 90%? >> >> I don't run the embedded server so don't know its defaults -- What's the >> Java heap size limited to? Should be less than the physical memory. What >> garbage collector is it using? On our 4-core 16GB Linux servers we run this: >> >> jsvc.exec -Dcatalina.home=/opt/tomcat/latest >> -Dcatalina.base=/opt/tomcat/latest -Djava.awt.headless=true >> -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager >> -Djava.util.logging.config.file=/opt/tomcat/latest/conf/logging.properties >> -cp >> /opt/tomcat/latest/bin/commons-daemon.jar:/opt/tomcat/latest/bin/bootstrap.jar:/opt/tomcat/latest/bin/tomcat-juli.jar >> -pidfile /var/run/tomcat.pid -java-home /usr/lib/jvm/java-openjdk -user >> tomcat -Xms512M -Xmx8192M -XX:+DisableExplicitGC -XX:+UseConcMarkSweepGC >> -XX:+UseParNewGC -XX:MaxGCPauseMillis=500 -server >> org.apache.catalina.startup.Bootstrap >> >> which is enough for CAS with Hazelcast ticket registry and the management >> webapp (all in the same Tomcat process). We're also running a small mongod >> (2gb cache size) on each server which handles the services registry. Most >> of the time, the servers are idle or very close to it. >> >> Could you have something that takes a (relatively) long time that causing >> the server to block? A slow LDAP, or slow database query, or something? We >> had problems like that when we were using MongoDB as our ticket registry; >> under heavy activity Mongo was too slow and the CAS threads would block >> waiting on it to complete. It wasn't pretty. >> >> --Dave >> >> >> -- >> >> DAVID A. CURRY, CISSP >> *DIRECTOR • INFORMATION SECURITY & PRIVACY* >> THE NEW SCHOOL • INFORMATION TECHNOLOGY >> >> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003 >> +1 646 909-4728 • [email protected] >> >> >> On Sun, Jul 28, 2019 at 11:00 AM abdelrahman halawa < >> [email protected]> wrote: >> >>> How many CPUs? >>> *4X* Intel(R) Xeon(R) @ 2.40GHz, 2400 Mhz, 2 Core(s) >>> How much memory? >>> 16G >>> What operating system? >>> Windows Server 2012 >>> What else is running on the server (nothing, hopefully)? >>> Nothing >>> Is the server paging or swapping (you don't want it to be)? >>> The default of Windows Server >>> >>> >>> >>> On Sun, Jul 28, 2019 at 4:44 PM David Curry <[email protected]> >>> wrote: >>> >>>> How many CPUs? >>>> How much memory? >>>> What operating system? >>>> What else is running on the server (nothing, hopefully)? >>>> Is the server paging or swapping (you don't want it to be)? >>>> If you're running on Linux VMs, do you have an entropy source for the >>>> crypto (you should)? >>>> >>>> >>>> -- >>>> >>>> DAVID A. CURRY, CISSP >>>> *DIRECTOR • INFORMATION SECURITY & PRIVACY* >>>> THE NEW SCHOOL • INFORMATION TECHNOLOGY >>>> >>>> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003 >>>> +1 646 909-4728 • [email protected] >>>> >>>> >>>> On Sun, Jul 28, 2019 at 7:51 AM abdelrahman halawa < >>>> [email protected]> wrote: >>>> >>>>> Hello all, >>>>> >>>>> I noticed that the CPU utilization of my CAS server reaches above 90% >>>>> with only 75 concurrent users or maybe less. >>>>> >>>>> Has this happened with you as well? Any suggestions to overcome this? >>>>> >>>>> I use embedded Tomcat with default settings. >>>>> >>>>> Thanks in advance. >>>>> >>>>> -- >>>>> - Website: https://apereo.github.io/cas >>>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>>> - List Guidelines: https://goo.gl/1VRrw7 >>>>> - Contributions: https://goo.gl/mh7qDG >>>>> --- >>>>> You received this message because you are subscribed to the Google >>>>> Groups "CAS Community" group. >>>>> To unsubscribe from this group and stop receiving emails from it, send >>>>> an email to [email protected]. >>>>> To view this discussion on the web visit >>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/fe73e941-cf70-4d77-a747-1f1c4d76a527%40apereo.org >>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/fe73e941-cf70-4d77-a747-1f1c4d76a527%40apereo.org?utm_medium=email&utm_source=footer> >>>>> . >>>>> >>>> -- >>>> - Website: https://apereo.github.io/cas >>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>> - List Guidelines: https://goo.gl/1VRrw7 >>>> - Contributions: https://goo.gl/mh7qDG >>>> --- >>>> You received this message because you are subscribed to the Google >>>> Groups "CAS Community" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to [email protected]. >>>> To view this discussion on the web visit >>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAPPO%3D_pb%3Dg7_f5T28aUWLWEkYpyTNn_p27cq5tZQqLcOw%40mail.gmail.com >>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAPPO%3D_pb%3Dg7_f5T28aUWLWEkYpyTNn_p27cq5tZQqLcOw%40mail.gmail.com?utm_medium=email&utm_source=footer> >>>> . >>>> >>> >>> >>> -- >>> Best regards, >>> ------------------------------------ >>> >>> >>> [image: photo] >>> *Abdelrahman Halawa* >>> Teacher Assistant, Computer and Systems Department, Al-Azhar University >>> +2 01008131693 <+2+01008131693> | [email protected] | Skype: >>> abdelrahmanhalawa <https://mail.google.com/mail/u/0/#> | Maadi, Cairo, >>> Egypt >>> <http://eg.linkedin.com/pub/abdelrahman-halawa/2b/689/886> >>> <http://twitter.com/Abdelrahman_S_H> >>> >>> -- >>> - Website: https://apereo.github.io/cas >>> - Gitter Chatroom: https://gitter.im/apereo/cas >>> - List Guidelines: https://goo.gl/1VRrw7 >>> - Contributions: https://goo.gl/mh7qDG >>> --- >>> You received this message because you are subscribed to the Google >>> Groups "CAS Community" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> To view this discussion on the web visit >>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMKQGEb5aaQ6-vNkqsC_XfZt8Y0HN5H%3D6iFwPC%3DeHsa9hPu2oA%40mail.gmail.com >>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMKQGEb5aaQ6-vNkqsC_XfZt8Y0HN5H%3D6iFwPC%3DeHsa9hPu2oA%40mail.gmail.com?utm_medium=email&utm_source=footer> >>> . >>> >> -- >> - Website: https://apereo.github.io/cas >> - Gitter Chatroom: https://gitter.im/apereo/cas >> - List Guidelines: https://goo.gl/1VRrw7 >> - Contributions: https://goo.gl/mh7qDG >> --- >> You received this message because you are subscribed to the Google Groups >> "CAS Community" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit >> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAO2bPNFfUdz6BCgyjA8tqrYWrgy__JmKd2H0ocAySkVYQ%40mail.gmail.com >> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAO2bPNFfUdz6BCgyjA8tqrYWrgy__JmKd2H0ocAySkVYQ%40mail.gmail.com?utm_medium=email&utm_source=footer> >> . >> > > > -- > Best regards, > ------------------------------------ > > > [image: photo] > *Abdelrahman Halawa* > Teacher Assistant, Computer and Systems Department, Al-Azhar University > +2 01008131693 <+2+01008131693> | [email protected] | Skype: > abdelrahmanhalawa <https://mail.google.com/mail/u/0/#> | Maadi, Cairo, > Egypt > <http://eg.linkedin.com/pub/abdelrahman-halawa/2b/689/886> > <http://twitter.com/Abdelrahman_S_H> > -- Best regards, ------------------------------------ [image: photo] *Abdelrahman Halawa* Teacher Assistant, Computer and Systems Department, Al-Azhar University +2 01008131693 <+2+01008131693> | [email protected] | Skype: abdelrahmanhalawa <https://mail.google.com/mail/u/0/#> | Maadi, Cairo, Egypt <http://eg.linkedin.com/pub/abdelrahman-halawa/2b/689/886> <http://twitter.com/Abdelrahman_S_H> -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMKQGEYHXukSCO6pSrPRhKAT4Tnx6tY9PhP2abp1k_o_snR2wg%40mail.gmail.com.
