RE: Mod_jk + Apache on RHEL3 gives 503 for jsp only

[[EMAIL PROTECTED]]

To answer some questions below:

Perfectly means it is our production tomcat server.  It performs all the
functions required and is accessed from the legacy webserver.

Getting images from the path http://webserver/PI/image.png.  We have no
direct access linked to tomcat instances on the their ports.

The Tomcat and Webserver will be on the same server.

JkShmFile seems to be for unix installs where this resides on RedHat
Linux EL3.  I can add it if it is required for linux.

Jkmount directives are not new but from a 4.1.24 Tomcat and Jk_mod
that was upgraded.  I will make the changes to be consistent with the
deployed version of Tomcat.

I have 4 workers setup.  1 points to a running 4.1.24 tomcat supporting
an application to be replaced soon I hope.  1 to a separate port on the
4.12.24 tomcat server for one specific application because I was asked
to set it up that way.  1 to the current production tomcat server.  And
one that is for testing and uses the same settings as the production but
I can edit and change as I need to make things work.

I am a bit frustrated as I have not done much to make things break.  I
copied the config files and edited the httpd.conf to be consistent with
the legacy install.  This is the only part that does not work.

If Apache's DocumentRoot does not correspond to Tomcat's appBase, then
any static files contained in the application will not be served by
Apache without some more Apache configuration changes.  Can you give me
an example of this?

-Original Message-
From: Mark Eggers [mailto:[EMAIL PROTECTED]
Sent: Thursday, October 06, 2005 10:54 PM
To: Tomcat Users List
Subject: Re: Mod_jk + Apache on RHEL3 gives 503 for jsp only


--- [EMAIL PROTECTED] [EMAIL PROTECTED]
wrote:

 I have jakarta-tomcat-5.5.9 installed and working
 properly on the new
 server.  It is perfectly accessible from the legacy
 web server.

By perfectly accessible you mean . . . ?

 The main page, home.jsp, loads fine in the servlet
 if no page is given.
 http://webserver/PI/  The home.jsp spawns a 503 if
 is in the URL.
 http://webserver/PI/home.jsp   I can successfully
 get images from the
 page from the tomcat instance.  It does not like the
 .jsp extension.

By successfully getting images, do you mean:

http://webserver/PI/image.png

or

http://tomcatserver:8080/PI/image.png

 I have watched in Ethereal as no traffic goes from
 the apache to the
 tomcat.
 I have tried using the loopback and local network
 address.

Why?  Is this Tomcat instance on the same server?


 #INSERT OF TOMCAT CONF PARAMETERS
 # Load mod_jk module
 # LoadModule jk_module modules/mod_jk.so
 LoadModule jk_module /etc/httpd/modules/mod_jk.so

 # Declare the module for IfModule directive
 #AddModule mod_jk.c

 # Where to find workers.properties
 JkWorkersFile /etc/httpd/conf/workers.properties

 # Where to put jk logs
 JkLogFile /var/log/httpd/mod_jk.log

 # Set the jk log level [debug/error/info]
 JkLogLevel debug

 # Select the log format
 JkLogStampFormat [%a %b %d %H:%M:%S %Y] 

 # JkOptions indicate to send SSL KEY SIZE,
 JkOptions +ForwardKeySize +ForwardURICompat
 -ForwardDirectories

 # JkRequestLogFormat set the request format
 JkRequestLogFormat %w %V %T


I don't see the specification for JkShmFile

 # Send servlet for context /examples to worker named
 worker1
 JkMount /examples/servlet/* worker1

The above should be:

JkMount /servlets-examples/servlet/* worker1

 JkMount /PI/* worker3
 #JkMount /PI/*.jsp worker3

Why are you using worker3 here?

 # Send JSPs for context /examples to worker named
 worker1
 JkMount /examples/*.jsp worker1

The above shoould be /jsp-examples/*.jsp worker1

 JkMount /journals/*.jsp worker1

 Worker Properties
 /etc/httpd/conf/workers.properties
 # Define some properties
 workers.apache_log=/var/log/httpd/

workers.tomcat_home=/usr/local/tomcat/jakarta-tomcat-5.5.9
 workers.java_home=/usr/bin/java
 ps=/

 #
 worker.list=worker1


According to the documentation this should contain a
comma separated list of all the workers.  However, if
you're going to the same Tomcat instance all the time,
you'll only need one worker definition

 # Set properties for worker1 (ajp13)
 worker.worker1.type=ajp13
 worker.worker1.host=172.20.1.19
 worker.worker1.port=8009


First of all, there should only be one worker list.
Second of all, why do you have multiple workers going
to the same host but different ports?  Do you have
multiple Tomcats running on this host?

 #
 worker.list=worker2

 # Set properties for worker2 (ajp13)
 worker.worker2.type=ajp13
 worker.worker2.host=172.20.1.19
 worker.worker2.port=10009

 #
 worker.list=worker3

 # Set properties for worker3 (ajp13)
 worker.worker3.type=ajp13
 worker.worker3.host=127.0.0.1
 worker.worker3.port=8099

 #
 worker.list=worker4

 # Set properties for worker4 (ajp13)
 worker.worker4.type=ajp13
 worker.worker4.host=172.20.1.19
 worker.worker4.port=8099

Even after all that is done, there are some other
issues when connecting Apache httpd

RE: Mod_jk + Apache on RHEL3 gives 503 for jsp only

[Mark Eggers]

Here's a quick writeup.

This is going to be a long reply, and I hope it will
be useful.

I am using Fedora Core 4 as a model.  I hope it will
be close enough to RHEL 3 to be useful.  You may have
to change paths in order to correspond to your
environment.

First of all, my environment:

Hardware/OS
===
Dell 8200 with 768 MB memory
Dual boot:
Fedora Core 4 2.6.13-1.1526_FC4
Windows 2000 Professional

Software

Java 1.5.0_4 from Sun
Apache 2.0.54 from RPM
Tomcat 5.5.9 from jakarta.apache.org
mod_jk 1.2.14.1 from source

Installation

Java 1.5.0_4 is installed in /usr/jdk1.5.0_04 and soft

linked to /usr/java
JAVA_HOME is set in /etc/profile
$JAVA_HOME/bin is placed in $PATH before /usr/bin

I've left the Apache RPM install alone, which means
the following:

DocumentRoot /var/www
Logs /etc/logs soft linked to /var/log/httpd
modules  /etc/modules soft linked to
/usr/lib/httpd/modules
conf /etc/conf
 /etc/conf.d

I've created a tomcat user with the same group
membership as apache user.  The home directory is
/home/tomcat.

/home/tomcat/jakarta-tomcat-5.5.9 Current Tomcat
installation

Configuration
=

workers.properties
--

I've placed workers.properties in /etc/httpd/conf

#
# basic worker list
#
worker.list=local,status

#
# one to serve the applications
#
worker.local.type=ajp13
worker.local.host=localhost
worker.local.port=8009

#
# one to check the status
#
worker.status.type=status
worker.status.host=localhost
worker.status.port=8009

This is all you really need in order to connect a
local Apache to a local Tomcat.

I cannot think of a good reason to define more
workers.  That isn't to say that there aren't any.

server.xml
-- 
If you put multiple workers going to the same host and
different ports, then you will have to modify
server.xml.  Basically, you will have to add a
connector statement for each unique port that you use
in your workers.properties file.

You have two different ports, so you will need two
connector statements.

Connector port=10009
   enableLookups=false redirectPort=8443
   protocol=AJP/1.3 /
Connector port=8099
   enableLookups=false redirectPort=8643
   protocol=AJP/1.3 /

jk.conf
---
I'm following the examples used by Fedora Core 4 in
configuring other add-on modules for Apache.  You can
place the mod_jk configuration information directly in
/etc/httpd/conf/httpd.conf, but I've chosen to create
a separate file in /etc/httpd/conf.d

The contents of my file are as follows:

#
# following Fedora's add-on philosophy
#
LoadModulejk_module modules/mod_jk.so

JkWorkersFile /etc/httpd/conf/workers.properties
JkLogFile logs/mod_jk.log
JkLogLevelwarn
JkLogStampFormat  [%a %b %d %H:%M:%S %Y] 
JkShmFile logs/shm-file


#
# jk status
#
JkMount /jk-status/ status

httpd.conf
--

Static File Problem
---
This is where the configuration can become a little
more complex.  It helps to understand how Apache finds
files to serve.

Each host in Apache has a DocumentRoot.  In Redhat
Fedora, the line that defines that reads:

DocumentRoot /var/www/html

That means that when you enter the following URL:

http://localhost/application/

Apache will look for the DirectoryIndex files (usually
index.html) in:

/var/www/html/application/

This is fine until you add an application server into
the mix.  Many people package up the entire
application into one war file.  This means that all
static as well as dynamic content gets loaded into the
application server area.

In your case, that's
/usr/local/tomcat/jakarta-tomcat-5.5.9/webapps

Apache will know absolutely nothing about this
directory, and any files that are not mapped by
JkMount and served by Tomcat will not be found by
Apache

Static File Solutions
-
1. Change DocumentRoot

The most global change is to change DocumentRoot.  In
order for this to work, all files in
/usr/local/tomcat/jakarta-tomcat-5.5.9/webapps must be
readable by the user that runs Apache (typically
apache in a Redhat distribution).

The way to do this is to put the following as your
DocumentRoot statement.

DocumentRoot
/usr/local/tomcat/jakarta-tomcat/webapps

While this works, it means that you will have to place
all web sites in this location, even if they do not
have dynamic content.

In general, I don't like this solution.

2. Add Directory and Alias Statements

Traditionally locating static files in a dynamic web
site has been done by using a combination of Directory
and Alias directives.  The Directory directive grants
appropriate server permissions (who gets to see the
files, etc.) and the Alias directive matches a
directory with a base URL.

For example, here's one way to map application1 living

in

/usr/local/tomcat/jakarta-tomcat/5.5.9/webapps/application1.

#
# This goes in httpd.conf
#
Directory /usr/local/tomcat/webapps/application1/
   Options Indexes

apache -- tomcat (mod_jk) works on localhost but not other hosts

[Scott MacAlvone]

I'm very new to tomcat and apache.  I've set up apache
to forward to tomcat using mod_jk.  It works fine on
the localhost, but if I try to connect through to
tomcat from any other host I get 404 file not found,
although I can connect to apache.  As follows:

These work on localhost:
http://localhost --apache
http://localhost/servlets-examples --tomcat

(So do these of course:
 http://localhost:8080/ --tomcat
 http://localhost:8080/servlets-examples --tomcat)

And this is what happens on another host:
http://hostname --apache
http://hostname/servlets-examples --404 file not
found
http://hostname:8080/servlets-examples --tomcat

OS = RHEL 4
Apache 2.0.52-19.ent (Red Hat RPM)
Tomcat 5.5.9-1jpp_5rh (Red Hat RPM)
mod_jk-ap20-1.2.6-3jpp_7rh (Red Hat RPM)
(Red Hat apparently doesn't offer a mod_jk2)

It was setup according to Pro Jakarta Tomcat 5
(Moodie, 2005), although I'm sure it's not the book's
fault.  Basically I modified server.xml to autogen
mod_jk.conf and added listener to Host, modified
workers.properties, and httpd.conf.

I have a feeling this is something simple, and I have
tried to find an answer with no luck.  If anyone has
any suggestions I would be greatly appreciative.


Scott



__ 
Start your day with Yahoo! - Make it your home page! 
http://www.yahoo.com/r/hs

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: apache -- tomcat (mod_jk) works on localhost but not other hosts

[Lyndon Tiu]

On Mon, 10 Oct 2005 09:01:04 -0700 (PDT) tomcat-user@jakarta.apache.org wrote:
 I'm very new to tomcat and apache.  I've set up apache
 to forward to tomcat using mod_jk.  It works fine on
 the localhost, but if I try to connect through to
 tomcat from any other host I get 404 file not found,


Please send us your workers.properties and httpd.conf.


--
Lyndon Tiu

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: apache -- tomcat (mod_jk) works on localhost but not other hosts

[Scott MacAlvone]

--- Lyndon Tiu [EMAIL PROTECTED] wrote:

 On Mon, 10 Oct 2005 09:01:04 -0700 (PDT)
 tomcat-user@jakarta.apache.org wrote:
  I'm very new to tomcat and apache.  I've set up
 apache
  to forward to tomcat using mod_jk.  It works fine
 on
  the localhost, but if I try to connect through to
  tomcat from any other host I get 404 file not
 found,
 
 
 Please send us your workers.properties and
 httpd.conf.

attached, tia, scott




__ 
Yahoo! Music Unlimited 
Access over 1 million songs. Try it free.
http://music.yahoo.com/unlimited/
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: apache -- tomcat (mod_jk) works on localhost but not other hosts

[Scott MacAlvone]

Thanks for the tip Lyndon.  It took a few tries, but I finally got it right, I 
think!

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

mod_jk + context don't work ?

[gianni dalmasso]

i configured several  html virtual hosts sites with jsps ; (apache 2.0 + 
mod_jk.+ tomcat 5.5.)
- virtual hosting managed by apache (name based virtual host)
- connector ajp13 for all jsps
- if a i create in server.xml : an host www.aaa.com + context infos -- 
everythink works but it's no longer good 
- if i put the site under localhost (i.e adding anything to default server.xml) 
and the context in a $CATALINA_HOME/conf/Catalina/localhost/ file , then : 
1: under the tomcat manager (pure tomcat space) -- it works 

2: if managed by apache -- the jsp cannot be reached.

it seems that the jsp managing passed by apache to tomcat have the bad context.

thanks in advance;

gianni

 

here is the configuration that DON'T work:

--

HTTPD.CONF 

 

Include /var/jakarta-tomcat-5.5.9/conf/mod_jk.conf 

 

MOD_JK.CONF 

. 

NameVirtualHost xx.yy.zz.kk:80

VirtualHost xx.yy.zz.kk:80

Directory /var/www/html/aaa 

DirectoryIndex index.htm index.html index.jsp

/Directory

ServerName www.aaa.com

DocumentRoot /var/www/html/aaa

JkMount /*.jsp ajp13

JkMount /servlet/* ajp13

/VirtualHost

 

SERVER.XML 

the default (appBase is $CATALINA_HOME/conf/webapps)

 

the file : $CATALINA_HOME/conf/Catalina/locahost/aaa.xml 

Context path=aaa(or /aaa)

docBase=/var/www/html/aaa

debug=0

reloadable=true 

/Context

 
 
 


-
Yahoo! Mail: gratis 1GB per i messaggi, antispam, antivirus, POP3

Mod_jk + Apache on RHEL3 gives 503 for jsp only

[[EMAIL PROTECTED]]

Hello,

I have a website that I am migrating to a new server.

Server is Redhat ES3 2.4.21-20.0.1.ELsmp.  Server version: Apache/2.0.46

I have jakarta-tomcat-5.5.9 installed and working properly on the new
server.  It is perfectly accessible from the legacy web server.

On the Website on the new server, access to jsp based pages give a 503
error.

The main page, home.jsp, loads fine in the servlet if no page is given.
http://webserver/PI/  The home.jsp spawns a 503 if is in the URL.
http://webserver/PI/home.jsp   I can successfully get images from the
page from the tomcat instance.  It does not like the .jsp extension.

In the mod_jk log I can see the match made:

[Wed Sep 28 10:29:14 2005] [18841:2816] [debug]
map_uri_to_worker::jk_uri_worker_map.c (461): Attempting to map context
URI '/PI/*'
[Wed Sep 28 10:29:14 2005] [18841:2816] [debug]
map_uri_to_worker::jk_uri_worker_map.c (475): Found a wildchar match
worker3 - /PI/*

However, in the apache access log is the 503.
xxx.89.23.173 - - [28/Sep/2005:10:29:14 -0400] GET /PI/home.jsp
HTTP/1.1 503 412 - Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US;
rv:1.7.12) Gecko/20050915 Firefox/1.0.7
SESSIONID=128F9AD992A16BC3D3EB1ED0AD5549C1

I have watched in Ethereal as no traffic goes from the apache to the
tomcat.
I have tried using the loopback and local network address.
I have tried adding a *.jsp directive to the mod_jk config for the
servlet.

Any help would be appreciated.  I have a dent in my desk from hitting it
with my forehead.

Apache Config:

#INSERT OF TOMCAT CONF PARAMETERS
# Load mod_jk module
# LoadModule jk_module modules/mod_jk.so
LoadModule jk_module /etc/httpd/modules/mod_jk.so

# Declare the module for IfModule directive
#AddModule mod_jk.c

# Where to find workers.properties
JkWorkersFile /etc/httpd/conf/workers.properties

# Where to put jk logs
JkLogFile /var/log/httpd/mod_jk.log

# Set the jk log level [debug/error/info]
JkLogLevel debug

# Select the log format
JkLogStampFormat [%a %b %d %H:%M:%S %Y] 

# JkOptions indicate to send SSL KEY SIZE,
JkOptions +ForwardKeySize +ForwardURICompat -ForwardDirectories

# JkRequestLogFormat set the request format
JkRequestLogFormat %w %V %T

# Send servlet for context /examples to worker named worker1
JkMount /examples/servlet/* worker1
JkMount /PI/* worker3
#JkMount /PI/*.jsp worker3
# Send JSPs for context /examples to worker named worker1
JkMount /examples/*.jsp worker1
JkMount /journals/*.jsp worker1

Worker Properties
/etc/httpd/conf/workers.properties
# Define some properties
workers.apache_log=/var/log/httpd/
workers.tomcat_home=/usr/local/tomcat/jakarta-tomcat-5.5.9
workers.java_home=/usr/bin/java
ps=/

#
worker.list=worker1

# Set properties for worker1 (ajp13)
worker.worker1.type=ajp13
worker.worker1.host=172.20.1.19
worker.worker1.port=8009

#
worker.list=worker2

# Set properties for worker2 (ajp13)
worker.worker2.type=ajp13
worker.worker2.host=172.20.1.19
worker.worker2.port=10009

#
worker.list=worker3

# Set properties for worker3 (ajp13)
worker.worker3.type=ajp13
worker.worker3.host=127.0.0.1
worker.worker3.port=8099

#
worker.list=worker4

# Set properties for worker4 (ajp13)
worker.worker4.type=ajp13
worker.worker4.host=172.20.1.19
worker.worker4.port=8099


_

Tim Pickard
CrossRef
Systems Support Analyst and Administrator
40 Salem Street
Lynnfield, MA 01940
tpickard at crossref dot org
781 295 0072 x27
__

Re: Mod_jk + Apache on RHEL3 gives 503 for jsp only

[Mark Eggers]

--- [EMAIL PROTECTED] [EMAIL PROTECTED]
wrote:

 I have jakarta-tomcat-5.5.9 installed and working
 properly on the new
 server.  It is perfectly accessible from the legacy
 web server.

By perfectly accessible you mean . . . ?
 
 The main page, home.jsp, loads fine in the servlet
 if no page is given.
 http://webserver/PI/  The home.jsp spawns a 503 if
 is in the URL.
 http://webserver/PI/home.jsp   I can successfully
 get images from the
 page from the tomcat instance.  It does not like the
 .jsp extension.

By successfully getting images, do you mean:

http://webserver/PI/image.png

or

http://tomcatserver:8080/PI/image.png

 I have watched in Ethereal as no traffic goes from
 the apache to the
 tomcat.
 I have tried using the loopback and local network
 address.

Why?  Is this Tomcat instance on the same server?

 
 #INSERT OF TOMCAT CONF PARAMETERS
 # Load mod_jk module
 # LoadModule jk_module modules/mod_jk.so
 LoadModule jk_module /etc/httpd/modules/mod_jk.so
 
 # Declare the module for IfModule directive
 #AddModule mod_jk.c
 
 # Where to find workers.properties
 JkWorkersFile /etc/httpd/conf/workers.properties
 
 # Where to put jk logs
 JkLogFile /var/log/httpd/mod_jk.log
 
 # Set the jk log level [debug/error/info]
 JkLogLevel debug
 
 # Select the log format
 JkLogStampFormat [%a %b %d %H:%M:%S %Y] 
 
 # JkOptions indicate to send SSL KEY SIZE,
 JkOptions +ForwardKeySize +ForwardURICompat
 -ForwardDirectories
 
 # JkRequestLogFormat set the request format
 JkRequestLogFormat %w %V %T
 

I don't see the specification for JkShmFile

 # Send servlet for context /examples to worker named
 worker1
 JkMount /examples/servlet/* worker1

The above should be:

JkMount /servlets-examples/servlet/* worker1

 JkMount /PI/* worker3
 #JkMount /PI/*.jsp worker3

Why are you using worker3 here?

 # Send JSPs for context /examples to worker named
 worker1
 JkMount /examples/*.jsp worker1

The above shoould be /jsp-examples/*.jsp worker1

 JkMount /journals/*.jsp worker1
 
 Worker Properties
 /etc/httpd/conf/workers.properties
 # Define some properties
 workers.apache_log=/var/log/httpd/

workers.tomcat_home=/usr/local/tomcat/jakarta-tomcat-5.5.9
 workers.java_home=/usr/bin/java
 ps=/
 
 #
 worker.list=worker1
 

According to the documentation this should contain a
comma separated list of all the workers.  However, if
you're going to the same Tomcat instance all the time,
you'll only need one worker definition

 # Set properties for worker1 (ajp13)
 worker.worker1.type=ajp13
 worker.worker1.host=172.20.1.19
 worker.worker1.port=8009
 

First of all, there should only be one worker list. 
Second of all, why do you have multiple workers going
to the same host but different ports?  Do you have
multiple Tomcats running on this host?

 #
 worker.list=worker2
 
 # Set properties for worker2 (ajp13)
 worker.worker2.type=ajp13
 worker.worker2.host=172.20.1.19
 worker.worker2.port=10009
 
 #
 worker.list=worker3
 
 # Set properties for worker3 (ajp13)
 worker.worker3.type=ajp13
 worker.worker3.host=127.0.0.1
 worker.worker3.port=8099
 
 #
 worker.list=worker4
 
 # Set properties for worker4 (ajp13)
 worker.worker4.type=ajp13
 worker.worker4.host=172.20.1.19
 worker.worker4.port=8099

Even after all that is done, there are some other
issues when connecting Apache httpd and Tomcat.  If
Apache's DocumentRoot does not correspond to Tomcat's
appBase, then any static files contained in the
application will not be served by Apache without some
more Apache configuration changes.

There are several ways of accomplishing this, using
the Directory directive and Aliases or JkAutoAlias in
Apache's httpd.conf.

/mde/



__ 
Yahoo! Mail - PC Magazine Editors' Choice 2005 
http://mail.yahoo.com

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Mod_jk setup problems

[Don Boling]

Thanks Mark,

I this helped a lot ... I'll insert comments as well... ;)

Mark Eggers wrote:


A couple of things here.  I'll try to insert comment
where appropriate.

--- Don Boling [EMAIL PROTECTED] wrote:

 


I can't seem to get anything to successfully pass
though the mod_jk connector to the webapp.
   



What version of mod_jk?
 


mod_jk 1.2.14



 


My mod_jk.conf , workers.properties are as follows.

$ less mod_jk.conf
#
   JkWorkersFile
/usr/local/etc/apache/workers.properties
   JkLogFile  /var/log/jk.log
   JkLogLevel debug
   



Later versions of mod_jk need JkShmFile on UNIX.
 

I removed the loadbalance setting... do I still need this? I have not 
seen any reference as to

what this should be set to.


 


   JkMount /*.jsp worker1
   JkMount /servlet/* worker1
   JkMount /examples/* worker1
   JkMount /docstore worker1
   JkMount /docstore/* worker1
   



My installs of Tomcat on Linux and Windows do not have
an examples web application.  I have /jsp-examples and
a /servlets-examples contexts.  You might try:

JkMount /jsp-examples/*.jsp worker1
JkMount /servlet-examples/servlet/* worker1
 


I corrected these, thanks for pointing those out...


I don't know what your other applications are, but
I'll comment on a general setup in a bit.

 


# Define 1 real worker using ajp13
worker.list=worker1
# Set properties for worker1 (ajp13)
worker.worker1.type=ajp13
worker.worker1.host=localhost
worker.worker1.port=8009
worker.worker1.lbfactor=50
worker.worker1.cachesize=10
worker.worker1.cache_timeout=600
worker.worker1.socket_keepalive=1
worker.worker1.reclycle_timeout=300
   



You probably don't need worker.worker1.lbfactor since
you're not using load balancing.  Recycle
(worker.worker1.reclycle_timeout) needs to be spelled
correctly.
 


oops, thanks ... new mod_jk.conf is ...

$ less mod_jk.conf
#
   JkWorkersFile /usr/local/etc/apache/workers.properties
   JkLogFile  /var/log/jk.log
   JkLogLevel debug

VirtualHost localhost
   ServerName localhost

   # Sample JkMounts.  Replace these with the paths you would
   # like to mount from your JSP server.
   JkMount /*.jsp worker1
   JkMount /servlet-examples/servlet/* worker1
   JkMount /jsp-examples/*.jsp worker1
   JkMount /docstore worker1
   JkMount /docstore/* worker1
/VirtualHost
mod_jk.conf (END)



[Lots of log stuff deleted]

With the exceptin of docstore, I did not see anything
that matched your JkMount statements.  Since there was
no match, no requests were forwarded.

In general, you will probably not have
$CATALINA_HOME/webapps and Apache's DocumentRoot
ovelapping each other.  Since they don't overlap,
Apache will not know anything about static files
(html, css, etc.) that live in $CATALINA_HOME/webapps.

You can use Directory and Alias directives in Apache
to set up access and map the directory into a URI
space that Apache knows about.

With later versions of mod_jk, you can use JkAutoAlias
to map directories for you.  From the documentation at
http://jakarta.apache.org/tomcat/connectors-doc/config/apache.html

JkAutoAlias /opt/tomcat/webapps

Then you can use JkMount to map certain requests
(*.jsp, /*/servlet/*).

JkMount /jsp-examples/*.jsp worker1

The value of JkAutoAlias appears to be prepended to
the JkMount directive to find the physical location.

I've not used JkAutoAlias, but this appears to be a
nice alternative to Directory and Alias directives in
httpd.conf.
 


I am trying the JkAutoAlias route ... almost there.


In short:

1. Add JkShmFile to httpd.conf
2. Remove lbfactor from workers.properties
3. Change the spelling of recycle
4. Use JkAutoAlias or Directory / Alias directives to
put the appropriate directories within Apache's
document and URI space.

I hope that gets you up and running.

/mde/
 


I have it running now with 'less' errors in jk.log ...

I have noticed that 8080 is not responding any more if I just try to hit 
TC directly
so I think, correct me if I'm wrong... this won't work even if setup 
correctly, until I

fix that.

Thanks again,

Don


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Mod_jk setup problems

[Mark Eggers]

Glad I was able to help a little bit.

In my experience (Linux,Solaris,Win/2K), 8080 should
always work if you have the Connector configured.  If
you can't get to http://localhost:8080/jsp-examples/
running, then there is something else amiss.

In your httpd.conf file, I still didn't see something
like the following:

JkShmFile /var/log/memory.shm

This wasn't necessary in 1.2.6 and may not be
necessary in 1.2.14, but according to the
documentation it's used on UNIX platforms.

In workers.properties lbfactor is used to set the
relative weight of a worker when you're doing load
balancing.  Since you're not doing load balancing,
letting it default to 1 should be fine.

You have two JkMounts for docstore.  I'm thinking that
only:

JkMount /docstore/* worker1

is necessary.

If the entire web application (including static files)
lives in $CATALINA_HOME/webapps, then the Apache
process will need access to those directories and
files.

Finally, a long time ago the order of startup was
important.  I think it was Tomcat first, then Apache. 
It's been a while, and right now I'm on the Windows
side of this machine so I can't check.  The order of
startup issue went away with Apache 2.0.x, but it may
still be an issue with your environment (Apache
1.3.x).

I would be interested in seeing your error logs from
mod_jk as well as seeing what catalina.out has in it
when you try to get to a web application via port
8080.

Hope this gives you some avenues to explore.

/mde/

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Mod_jk setup problems

[Don Boling]

Hi,

I am running Tomcat5.5.9 and JDK1.5.0_04 with a Apache 1.3 webserver on 
FreeBSD 5.3.


I can't seem to get anything to successfully pass though the mod_jk 
connector to the webapp.


My mod_jk.conf , workers.properties are as follows.

$ less mod_jk.conf
#
   JkWorkersFile /usr/local/etc/apache/workers.properties
   JkLogFile  /var/log/jk.log
   JkLogLevel debug

VirtualHost localhost
   ServerName localhost

   # Sample JkMounts.  Replace these with the paths you would
   # like to mount from your JSP server.
   JkMount /*.jsp worker1
   JkMount /servlet/* worker1
   JkMount /examples/* worker1
   JkMount /docstore worker1
   JkMount /docstore/* worker1
/VirtualHost
mod_jk.conf (END)

$ less workers.properties
# Setting Tomcat  Java Home
workers.tomcat_home=/usr/local/jakarta-tomcat5.5/
workers.java_home=/usr/local/jdk1.5.0/
ps=/

# Define 1 real worker using ajp13
worker.list=worker1
# Set properties for worker1 (ajp13)
worker.worker1.type=ajp13
worker.worker1.host=localhost
worker.worker1.port=8009
worker.worker1.lbfactor=50
worker.worker1.cachesize=10
worker.worker1.cache_timeout=600
worker.worker1.socket_keepalive=1
worker.worker1.reclycle_timeout=300

workers.properties (END)


When I start Tomcat  Apache... is seems to start ok , but I get this 
output in the jk.log file ...


$ less /var/log/jk.log
[Sun Sep 18 21:37:30 2005] [6691:] [error] jk_init::mod_jk.c (2035): 
Initializing shm:/usr/local/logs/jk-runtime-status errno=2
[Sun Sep 18 21:37:30 2005] [6691:] [debug] 
uri_worker_map_open::jk_uri_worker_map.c (323): rule map size is 0
[Sun Sep 18 21:37:30 2005] [6691:] [debug] 
build_worker_map::jk_worker.c (236): creating worker worker1
[Sun Sep 18 21:37:30 2005] [6691:] [debug] 
wc_create_worker::jk_worker.c (141): about to create instance worker1 of 
ajp13
[Sun Sep 18 21:37:30 2005] [6691:] [debug] 
wc_create_worker::jk_worker.c (154): about to validate and init worker1
[Sun Sep 18 21:37:30 2005] [6691:] [debug] 
ajp_validate::jk_ajp_common.c (1806): worker worker1 contact is 
'localhost:8009'
[Sun Sep 18 21:37:30 2005] [6691:] [debug] ajp_init::jk_ajp_common.c 
(1895): setting socket keepalive to 1
[Sun Sep 18 21:37:30 2005] [6691:] [debug] ajp_init::jk_ajp_common.c 
(1934): setting socket timeout to -1
[Sun Sep 18 21:37:30 2005] [6691:] [debug] ajp_init::jk_ajp_common.c 
(1938): setting socket buffer size to 0
[Sun Sep 18 21:37:30 2005] [6691:] [debug] ajp_init::jk_ajp_common.c 
(1942): setting connection recycle timeout to 0
[Sun Sep 18 21:37:30 2005] [6691:] [debug] ajp_init::jk_ajp_common.c 
(1946): setting cache timeout to 600
[Sun Sep 18 21:37:30 2005] [6691:] [debug] ajp_init::jk_ajp_common.c 
(1950): setting connect timeout to 0
[Sun Sep 18 21:37:30 2005] [6691:] [debug] ajp_init::jk_ajp_common.c 
(1954): setting reply timeout to 0
[Sun Sep 18 21:37:30 2005] [6691:] [debug] ajp_init::jk_ajp_common.c 
(1958): setting prepost timeout to 0
[Sun Sep 18 21:37:30 2005] [6691:] [debug] ajp_init::jk_ajp_common.c 
(1962): setting recovery opts to 0
[Sun Sep 18 21:37:30 2005] [6691:] [debug] ajp_init::jk_ajp_common.c 
(1966): setting number of retries to 3
[Sun Sep 18 21:37:30 2005] [6691:] [debug] 
ajp_create_endpoint_cache::jk_ajp_common.c (1843): setting connection 
cache size to 10
[Sun Sep 18 21:37:30 2005] [6691:] [debug] 
build_worker_map::jk_worker.c (248): removing old worker1 worker
[Sun Sep 18 21:39:14 2005] [7500:] [debug] 
map_uri_to_worker::jk_uri_worker_map.c (449): Attempting to map URI 
'/docstore/' from 0 maps
[Sun Sep 18 22:48:11 2005] [7501:] [debug] 
map_uri_to_worker::jk_uri_worker_map.c (449): Attempting to map URI '/' 
from 0 maps
[Sun Sep 18 22:48:11 2005] [7501:] [debug] 
map_uri_to_worker::jk_uri_worker_map.c (449): Attempting to map URI 
'/index.html' from 0 maps
[Sun Sep 18 22:48:11 2005] [7501:] [debug] 
map_uri_to_worker::jk_uri_worker_map.c (449): Attempting to map URI 
'/HEADER.html' from 0 maps
[Sun Sep 18 22:48:11 2005] [7501:] [debug] 
map_uri_to_worker::jk_uri_worker_map.c (449): Attempting to map URI 
'/README.html' from 0 maps
[Sun Sep 18 23:54:42 2005] [7503:] [debug] 
map_uri_to_worker::jk_uri_worker_map.c (449): Attempting to map URI '/' 
from 0 maps
[Sun Sep 18 23:54:42 2005] [7503:] [debug] 
map_uri_to_worker::jk_uri_worker_map.c (449): Attempting to map URI 
'/index.html' from 0 maps
[Sun Sep 18 23:54:42 2005] [7503:] [debug] 
map_uri_to_worker::jk_uri_worker_map.c (449): Attempting to map URI 
'/HEADER.html' from 0 maps
[Sun Sep 18 23:54:42 2005] [7503:] [debug] 
map_uri_to_worker::jk_uri_worker_map.c (449): Attempting to map URI 
'/README.html' from 0 maps
[Sun Sep 18 23:55:51 2005] [7507:] [debug] 
map_uri_to_worker::jk_uri_worker_map.c (449): Attempting to map URI '/' 
from 0 maps
[Sun Sep 18 23:55:51 2005] [7507:] [debug] 
map_uri_to_worker::jk_uri_worker_map.c (449): Attempting

Re: Mod_jk setup problems

[Mark Eggers]

A couple of things here.  I'll try to insert comment
where appropriate.

--- Don Boling [EMAIL PROTECTED] wrote:

 I can't seem to get anything to successfully pass
 though the mod_jk connector to the webapp.

What version of mod_jk?
 
 My mod_jk.conf , workers.properties are as follows.
 
 $ less mod_jk.conf
 #
 JkWorkersFile
 /usr/local/etc/apache/workers.properties
 JkLogFile  /var/log/jk.log
 JkLogLevel debug

Later versions of mod_jk need JkShmFile on UNIX.

 JkMount /*.jsp worker1
 JkMount /servlet/* worker1
 JkMount /examples/* worker1
 JkMount /docstore worker1
 JkMount /docstore/* worker1

My installs of Tomcat on Linux and Windows do not have
an examples web application.  I have /jsp-examples and
a /servlets-examples contexts.  You might try:

JkMount /jsp-examples/*.jsp worker1
JkMount /servlet-examples/servlet/* worker1

I don't know what your other applications are, but
I'll comment on a general setup in a bit.
 
 # Define 1 real worker using ajp13
 worker.list=worker1
 # Set properties for worker1 (ajp13)
 worker.worker1.type=ajp13
 worker.worker1.host=localhost
 worker.worker1.port=8009
 worker.worker1.lbfactor=50
 worker.worker1.cachesize=10
 worker.worker1.cache_timeout=600
 worker.worker1.socket_keepalive=1
 worker.worker1.reclycle_timeout=300

You probably don't need worker.worker1.lbfactor since
you're not using load balancing.  Recycle
(worker.worker1.reclycle_timeout) needs to be spelled
correctly.

[Lots of log stuff deleted]

With the exceptin of docstore, I did not see anything
that matched your JkMount statements.  Since there was
no match, no requests were forwarded.

In general, you will probably not have
$CATALINA_HOME/webapps and Apache's DocumentRoot
ovelapping each other.  Since they don't overlap,
Apache will not know anything about static files
(html, css, etc.) that live in $CATALINA_HOME/webapps.

You can use Directory and Alias directives in Apache
to set up access and map the directory into a URI
space that Apache knows about.

With later versions of mod_jk, you can use JkAutoAlias
to map directories for you.  From the documentation at
http://jakarta.apache.org/tomcat/connectors-doc/config/apache.html

JkAutoAlias /opt/tomcat/webapps

Then you can use JkMount to map certain requests
(*.jsp, /*/servlet/*).

JkMount /jsp-examples/*.jsp worker1

The value of JkAutoAlias appears to be prepended to
the JkMount directive to find the physical location.

I've not used JkAutoAlias, but this appears to be a
nice alternative to Directory and Alias directives in
httpd.conf.

In short:

1. Add JkShmFile to httpd.conf
2. Remove lbfactor from workers.properties
3. Change the spelling of recycle
4. Use JkAutoAlias or Directory / Alias directives to
put the appropriate directories within Apache's
document and URI space.

I hope that gets you up and running.

/mde/



__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: mod_jk performance

[Andrew Miehs]

Hi Peter,

That is why I mentioned it. We deliver our static content from other  
servers,
and had originally considered hiding our TCs behind apache for  
'security reasons'.


After seeing the speed difference, and the fact that their isn't  
really a security
difference if you just push all the traffic straight through anyway,  
we decided not

to put Apache between our users and our Tomcat servers.

If I didn't need to use re-writes, and complicated rules on our  
apaches, I would also

use THTTP for performance reasons.

Andrew


On Sep 16, 2005, at 3:39 PM, Peter Flynn wrote:

OK, that's useful information.

But I have 300,000+ static HTML files to server, and about
10 JSP files. I'm surely not switching my entire server to
Tomcat...:-)



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Tomcat directory protection (was: Re: mod_jk performance

[Peter Flynn]

On Wed, 2005-09-14 at 13:29, Hassan Schroeder wrote:
 KEREM ERKAN wrote:
  Apache has better directory/file restricting and handling than Tomcat
 
 better in what way? What actual *security* issue are we talking
 about -- in other words, what exploit is Tomcat susceptible to
 that Apache is not?

I don't know if Kerem Erkan was talking about exploits, but I have 
looked for some facility in Tomcat equivalent to Apache .htaccess
files and failed to find any mention of them. Is it possible to do
this kind of IP-level or simple username/password restriction in
Tomcat?

///Peter



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: mod_jk performance

[Peter Flynn]

On Wed, 2005-09-14 at 13:50, Andrew Miehs wrote:
 We did some comparisons between running Tomcat 5.0 standalone, or TC  
 5.0 and Apache 2.0
 
 If you are ONLY delivering JSPs, we found that we could only deal  
 with 50% of the requests when running combined Apache TC and mod_jk

OK, that's useful information. 

But I have 300,000+ static HTML files to server, and about
10 JSP files. I'm surely not switching my entire server to 
Tomcat...:-)

///Peter



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: mod_jk performance

[Peter Flynn]

On Wed, 2005-09-14 at 18:52, Mark Thomas wrote:
 KEREM ERKAN wrote:
  Tomcat is harder to configure and -sadly- it has a far worse documentation
  than Apache (for now).
 
 I look forward to seeing your documentation patches in Bugzilla ;)

I will certainly document how to fix my problem once it's fixed, but 
anything I have ever sent to Bugzilla either gets ignored or argued 
about ad infinitum and nothing ever done, so any doc I write will go 
on my blog or my web site (from where anyone is free to take/copy it).

///Peter


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: mod_jk performance

[KEREM ERKAN]

 -Original Message-
 From: Mark Thomas [mailto:[EMAIL PROTECTED] 
 Sent: Wednesday, September 14, 2005 8:53 PM
 To: Tomcat Users List
 Subject: Re: mod_jk performance
 
 KEREM ERKAN wrote:
  Tomcat is harder to configure and -sadly- it has a far worse 
  documentation than Apache (for now).
 
 I look forward to seeing your documentation patches in Bugzilla ;)
 
 Mark
 
I would really love to. As soon as I get more experience on Tomcat (I work
with Tomcat for approx. 6-7 months), I will try to contribute a little. ;)

Don't get me wrong, but Tomcat documentation is not very explanatory and
does not have many examples for a newbie to get his hands on Tomcat easily.

Cheers,

Kerem

Apache + mod_jk + Tomcat ... SSL Problems

[Oliver Schoenwald]

Hello,

we are using the following versions:
Apache 2.0.47
mod_jk (not mod_jk2)
Tomcat 5.5.9

The SSL-Feature is backed by openssl 0.9.7c.

We configured mod_jk to send the SSL information to the tomcat engine:
JkHTTPSIndicator HTTPS
JkSESSIONIndicator SSL_SESSION_ID
JkCIPHERIndicator SSL_CIPHER
JkCERTSIndicator SSL_CLIENT_CERT

And we configured the SSL-Module of Apache to use the SSL-Cache and to 
hold the SSL Session for 30 Minutes.

SSLSessionCache dbm:logs/ssl_scache
SSLSessionCacheTimeout  1800

Using the trick described in the tomcat documenation, I could activate 
and use the Session Tracking via the SSL Session ID,
which is exactly what we wanted because so we don't need cookies or 
URL-Rewriting.
To manage the SSL Sessions I implemented my own SSLSessionManager-Class 
in my Webapplication and all worked fine,
except one little problem: The SSL Session Key seems to get lost by 
Apache or mod_ssl or OpenSSL!


I used a test application in my servlet engine to experiment with the 
session tracking via ssl session id-feature. That application
showed me if the SSL Session ID was set, what value it has, what my own 
SessionManagement-Class knew about that session
(when it was created, when it was used last time, how long until 
expiration, which attributes are managed for that session).
The SessionManager was configured to hold every SSL Session for 
unlimited time, only to set an internal invalid-flag after

a configured time of 30 minutes.

The test application showed that in newly started application instances 
(apache, tomcat) the SSL Session worked properly and
the SSL Session ID was created. When reloading the test application 
repeatedly, that SSL Session ID kept its value. Bingo!

All that I needed.

But then...

Few minutes later the test application showed that there was *no* SSL 
Session ID available within the https-request any longer.
When I reloaded the test application again, a new SSL Session ID was 
created. This happened again and again later, always far earlier

than the SSLSessionCache was configured.

Then I used tomcat's web-connector and tried the same - and there the 
SSL Session ID worked properly and wasn't lost preemptively.


Does someone know something about problems with SSL Session IDs with 
Apache und mod_jk? Does someone have a solution how

to remove that problem?

Thank you in advance,

Oliver Schoenwald
University of Hagen, Germany


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

mod_jk performance

[marc ratun]

Hi,

I just read an article about webapp benchmarks [1] and they mentioned that
apache+mod_jk+tomcat is about 30% slower than pure tomcat.

This is sad. Until now I believed that the performance decrease with
apache/mod_jk would be marginal.

Putting apache/mod_jk before tomcat is very nice. I don't want to miss
it because it is a good way to integrate other modules.

Is there any way to speed up apache/tomcat cooperation?


Marc

[1] (german only) http://www.heise.de/ix/artikel/2005/10/124/

_
FREE pop-up blocking with the new MSN Toolbar - get it now! 
http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: mod_jk performance

[KEREM ERKAN]

Well I tried both, and as my websites do not have a very high traffic (I
have approximately a total of 50 GB per month) the speed is not primarily a
concern to me, I am looking to the security side of the problem and
Apache+mod_jk does its job better than only Tomcat concerning security.

I have stress tested Apache+Tomcat and only Tomcat and it seems like %30 is
too high. I can suggest using mod_jk 1.2.10 with Tomcat 5.5.9, surprisingly
you get very similar results. Mod_jk  1.2.10 had some performance problems
but I did not thoroughly test why.

I hope this may help a little.

Cheers,

Kerem

 -Original Message-
 From: marc ratun [mailto:[EMAIL PROTECTED] 
 Sent: Wednesday, September 14, 2005 2:47 PM
 To: tomcat-user@jakarta.apache.org
 Subject: mod_jk performance
 
 Hi,
 
 I just read an article about webapp benchmarks [1] and they 
 mentioned that
 apache+mod_jk+tomcat is about 30% slower than pure tomcat.
 
 This is sad. Until now I believed that the performance 
 decrease with apache/mod_jk would be marginal.
 
 Putting apache/mod_jk before tomcat is very nice. I don't 
 want to miss it because it is a good way to integrate other modules.
 
 Is there any way to speed up apache/tomcat cooperation?
 
 
 Marc
 
 [1] (german only) http://www.heise.de/ix/artikel/2005/10/124/
 
 _
 FREE pop-up blocking with the new MSN Toolbar - get it now! 
 http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/
 
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 

Re: mod_jk performance

[Bruno Georges]

Marc

If the performance of your app is not acceptable using mod_jk , you could
try other alternatives and still keep apache in front to serve static
content and use other modules.
You can use apache mod_proxy to forward request on 8080 [or whatever your
run tomcat on] to tomcat without going through mod_jk
There are pros and cons to take this approach, but it may suffice in your
case.

Hope it helps.

Bruno Georges

Glencore International AG
Tel. +41 41 709 3204
Fax +41 41 709 3000



 
  marc ratun  
 
  [EMAIL PROTECTED] To:  
tomcat-user@jakarta.apache.org  
 
  ail.com cc:  
 
   Subject: mod_jk performance  
 
  14.09.05 13:46
 
  Please respond   Distribute:  
 
  to Tomcat Users Personal?   |---|
 
  List| [ ] x |
 
   |---|
 

 

 




Hi,

I just read an article about webapp benchmarks [1] and they mentioned that
apache+mod_jk+tomcat is about 30% slower than pure tomcat.

This is sad. Until now I believed that the performance decrease with
apache/mod_jk would be marginal.

Putting apache/mod_jk before tomcat is very nice. I don't want to miss
it because it is a good way to integrate other modules.

Is there any way to speed up apache/tomcat cooperation?


Marc

[1] (german only) http://www.heise.de/ix/artikel/2005/10/124/

_
FREE pop-up blocking with the new MSN Toolbar - get it now!
http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




LEGAL DISCLAIMER. The contents of this e-mail and any attachments are strictly
confidential and they may not be used or disclosed by someone who is not a
named recipient.
If you have received this email in error please notify the sender by replying
to this email inserting the word misdirected as the message and delete this
e-mail from your system.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: mod_jk performance

[KEREM ERKAN]

AFAIK mod_proxy performs worse than mod_jk.

Just my 2 cents.

Kerem 

 -Original Message-
 From: Bruno Georges [mailto:[EMAIL PROTECTED] 
 Sent: Wednesday, September 14, 2005 2:58 PM
 To: Tomcat Users List
 Cc: tomcat-user@jakarta.apache.org
 Subject: Re: mod_jk performance
 
 Marc
 
 If the performance of your app is not acceptable using mod_jk 
 , you could try other alternatives and still keep apache in 
 front to serve static content and use other modules.
 You can use apache mod_proxy to forward request on 8080 [or 
 whatever your run tomcat on] to tomcat without going through 
 mod_jk There are pros and cons to take this approach, but it 
 may suffice in your case.
 
 Hope it helps.
 
 Bruno Georges
 
 Glencore International AG
 Tel. +41 41 709 3204
 Fax +41 41 709 3000
 
 
   
   
  
   marc ratun
   
  
   [EMAIL PROTECTED] To:  
 tomcat-user@jakarta.apache.org

   ail.com cc:
   
  
Subject: 
 mod_jk performance

   14.09.05 13:46  
   
  
   Please respond   Distribute:
   
  
   to Tomcat Users Personal?  
  |---|
  
   List   
  | [ ] x |
  
   
  |---|
  
   
   
  
   
   
  
 
 
 
 
 Hi,
 
 I just read an article about webapp benchmarks [1] and they 
 mentioned that
 apache+mod_jk+tomcat is about 30% slower than pure tomcat.
 
 This is sad. Until now I believed that the performance 
 decrease with apache/mod_jk would be marginal.
 
 Putting apache/mod_jk before tomcat is very nice. I don't 
 want to miss it because it is a good way to integrate other modules.
 
 Is there any way to speed up apache/tomcat cooperation?
 
 
 Marc
 
 [1] (german only) http://www.heise.de/ix/artikel/2005/10/124/
 
 _
 FREE pop-up blocking with the new MSN Toolbar - get it now!
 http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/
 
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 
 
 
 LEGAL DISCLAIMER. The contents of this e-mail and any 
 attachments are strictly confidential and they may not be 
 used or disclosed by someone who is not a named recipient.
 If you have received this email in error please notify the 
 sender by replying to this email inserting the word 
 misdirected as the message and delete this e-mail from your system.
 
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 

Re: mod_jk performance

[Mladen Turk]

marc ratun wrote:

Hi,

I just read an article about webapp benchmarks [1] and they mentioned that
apache+mod_jk+tomcat is about 30% slower than pure tomcat.

This is sad. Until now I believed that the performance decrease with
apache/mod_jk would be marginal.



Why would that be sad?
30% performance decrease still offers you a 300% performance
increase over CGI or mod_proxy.
Since you decided to use mod_jk that uses AJP protocol for both
binary HTTP and constant connection pool, you have also the load
balancer capabilities that will allow you to either segment or
double your backend application servers. Thus with two backend
servers you will have both speed increase and failover over
a single box implementation.

OTOH if you just wish Apache with all the goodies, but
with Servlet support, then 30% performance decrease is very much
acceptable thought.

If OTOH you don't need legacy Apache modules, use Tomcat 5.5
with Native support that will both outperform any Apache httpd
server (and most others) for both for dynamic and static content.

Regards,
Mladen.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: mod_jk performance

[Hassan Schroeder]

KEREM ERKAN wrote:


... I am looking to the security side of the problem and
Apache+mod_jk does its job better than only Tomcat concerning security.


How so?

--
Hassan Schroeder - [EMAIL PROTECTED]
Webtuitive Design ===  (+1) 408-938-0567   === http://webtuitive.com

  dream.  code.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: mod_jk performance

[Bruno Georges]

Kerem,
You are probably right, I personnaly never faced any issues with any of
them.
However, Tom can you be more specific about the type of traffic your app
has to serve and what are performance/response time requirements.

Hardware and network, server and JVM configuration  can also be either a
bottleneck or a way to improve the overall performance of your syste.
Ideally, when you have metrics on the different parts of the systems it is
easier to tune .

Bruno Georges

Glencore International AG
Tel. +41 41 709 3204
Fax +41 41 709 3000



 
  KEREM ERKAN   
 
  [EMAIL PROTECTED] To:  'Tomcat Users List' 
tomcat-user@jakarta.apache.org 
  ari.com.tr  cc:  
 
   Subject: RE: mod_jk performance  
 
  14.09.05 14:00
 
  Please respond   Distribute:  
 
  to Tomcat Users Personal?   |---|
 
  List| [ ] x |
 
   |---|
 

 

 




AFAIK mod_proxy performs worse than mod_jk.

Just my 2 cents.

Kerem

 -Original Message-
 From: Bruno Georges [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, September 14, 2005 2:58 PM
 To: Tomcat Users List
 Cc: tomcat-user@jakarta.apache.org
 Subject: Re: mod_jk performance

 Marc

 If the performance of your app is not acceptable using mod_jk
 , you could try other alternatives and still keep apache in
 front to serve static content and use other modules.
 You can use apache mod_proxy to forward request on 8080 [or
 whatever your run tomcat on] to tomcat without going through
 mod_jk There are pros and cons to take this approach, but it
 may suffice in your case.

 Hope it helps.

 Bruno Georges

 Glencore International AG
 Tel. +41 41 709 3204
 Fax +41 41 709 3000





   marc ratun


   [EMAIL PROTECTED] To:
 tomcat-user@jakarta.apache.org

   ail.com cc:


Subject:
 mod_jk performance

   14.09.05 13:46


   Please respond   Distribute:


   to Tomcat Users Personal?
  |---|

   List
  | [ ] x |


  |---|











 Hi,

 I just read an article about webapp benchmarks [1] and they
 mentioned that
 apache+mod_jk+tomcat is about 30% slower than pure tomcat.

 This is sad. Until now I believed that the performance
 decrease with apache/mod_jk would be marginal.

 Putting apache/mod_jk before tomcat is very nice. I don't
 want to miss it because it is a good way to integrate other modules.

 Is there any way to speed up apache/tomcat cooperation?


 Marc

 [1] (german only) http://www.heise.de/ix/artikel/2005/10/124/

 _
 FREE pop-up blocking with the new MSN Toolbar - get it now!
 http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/


 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]




 LEGAL DISCLAIMER. The contents of this e-mail and any
 attachments are strictly confidential and they may not be
 used or disclosed by someone who is not a named recipient.
 If you have received this email in error please notify the
 sender by replying to this email inserting the word
 misdirected as the message and delete this e-mail from your system.


 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED

RE: mod_jk performance

[KEREM ERKAN]

Apache has better directory/file restricting and handling than Tomcat, it is
more customizable and it is much user/admin friendly to configure :-) (at
least for me)

I configure all security related stuff on Apache and have my Tomcat listen
only on AJP connector with 127.0.0.1:8009.

Tomcat is harder to configure and -sadly- it has a far worse documentation
than Apache (for now).

Best regards,

Kerem

 -Original Message-
 From: Hassan Schroeder [mailto:[EMAIL PROTECTED] 
 Sent: Wednesday, September 14, 2005 3:13 PM
 To: Tomcat Users List
 Subject: Re: mod_jk performance
 
 KEREM ERKAN wrote:
 
  ... I am looking to the security side of the problem and
  Apache+mod_jk does its job better than only Tomcat 
 concerning security.
 
 How so?
 
 --
 Hassan Schroeder - [EMAIL PROTECTED]
 Webtuitive Design ===  (+1) 408-938-0567   === http://webtuitive.com
 
dream.  code.
 
 
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 

Re: mod_jk performance

[Andrew Miehs]

Apache is easier to configure, but at a 50% performance hit for pure  
JSP pages


Andrew

On Sep 14, 2005, at 2:18 PM, KEREM ERKAN wrote:

Apache has better directory/file restricting and handling than  
Tomcat, it is
more customizable and it is much user/admin friendly to  
configure :-) (at

least for me)



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: mod_jk performance

[Hassan Schroeder]

KEREM ERKAN wrote:

Apache has better directory/file restricting and handling than Tomcat


better in what way? What actual *security* issue are we talking
about -- in other words, what exploit is Tomcat susceptible to
that Apache is not?

--
Hassan Schroeder - [EMAIL PROTECTED]
Webtuitive Design ===  (+1) 408-938-0567   === http://webtuitive.com

  dream.  code.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: mod_jk performance

[KEREM ERKAN]

 

 -Original Message-
 From: Hassan Schroeder [mailto:[EMAIL PROTECTED] 
 Sent: Wednesday, September 14, 2005 3:30 PM
 To: Tomcat Users List
 Subject: Re: mod_jk performance
 
 KEREM ERKAN wrote:
  Apache has better directory/file restricting and handling 
 than Tomcat
 
 better in what way? What actual *security* issue are we 
 talking about -- in other words, what exploit is Tomcat 
 susceptible to that Apache is not?
 
I am not aware of any critical exploits Apache or Tomcat have. As I said, I
only think about restricting access to some of my server files. You may be
able to do this with Tomcat but from my point of view, it is harder to
configure. That's all.

Cheers,

Kerem


smime.p7s
Description: S/MIME cryptographic signature

Re: mod_jk performance

[Lionel Farbos]

I use Apache/mod_jk/Tomcat for a long time on production servers with load 
balancing/failover (and with high traffic sites) and I'm sure it's not 30% 
slower than a pure Tomcat.

I use Apache to deliver static files, manage SSL and other apache specifics 
modules.
Then, Tomcat only manage dynamics requests (servlets and JSPs) without SSL.
With this distribution of the functions, the Tomcat is less stressed and its 
performances increase.
And when the Tomcat load increase, I add a Tomcat in the cluster...

So, I think it's a good way to use it.

On Wed, 14 Sep 2005 11:46:51 +
marc ratun [EMAIL PROTECTED] wrote:

 Hi,
 
 I just read an article about webapp benchmarks [1] and they mentioned that
 apache+mod_jk+tomcat is about 30% slower than pure tomcat.
 
 This is sad. Until now I believed that the performance decrease with
 apache/mod_jk would be marginal.
 
 Putting apache/mod_jk before tomcat is very nice. I don't want to miss
 it because it is a good way to integrate other modules.
 
 Is there any way to speed up apache/tomcat cooperation?
 
 
 Marc
 
 [1] (german only) http://www.heise.de/ix/artikel/2005/10/124/
 
 _
 FREE pop-up blocking with the new MSN Toolbar - get it now! 
 http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/
 
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: mod_jk performance

[Andrew Miehs]

We did some comparisons between running Tomcat 5.0 standalone, or TC  
5.0 and Apache 2.0


If you are ONLY delivering JSPs, we found that we could only deal  
with 50% of the requests when running combined Apache TC and mod_jk


Andrew


On Sep 14, 2005, at 2:45 PM, Lionel Farbos wrote:

I use Apache/mod_jk/Tomcat for a long time on production servers  
with load balancing/failover (and with high traffic sites) and I'm  
sure it's not 30% slower than a pure Tomcat.




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: mod_jk performance

[Lionel Farbos]

On Wed, 14 Sep 2005 14:55:08 +0300
KEREM ERKAN [EMAIL PROTECTED] wrote:

  Mod_jk  1.2.10 had some performance problems
 but I did not thoroughly test why.

Is is proved ? Where do you find this ?
I tested mod_jk 1.2.14 (but not stressed it) and it seems to be a good 
version...
What sort of performance problems do you mention ?

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: mod_jk performance

[Lionel Farbos]

But, in a web site, there is never only JSPs : there is a lot of static files 
(images, css, js, ...)
So, if you don't have a apache in the frontend to deliver theses static files, 
there is an overload for the TC server...

So, your tests stressed only light JSPs or a real site ?
and what is your solution for load-balancing/failover ?

On Wed, 14 Sep 2005 14:50:52 +0200
Andrew Miehs [EMAIL PROTECTED] wrote:

 We did some comparisons between running Tomcat 5.0 standalone, or TC  
 5.0 and Apache 2.0
 
 If you are ONLY delivering JSPs, we found that we could only deal  
 with 50% of the requests when running combined Apache TC and mod_jk
 
 Andrew
 
 
 On Sep 14, 2005, at 2:45 PM, Lionel Farbos wrote:
 
  I use Apache/mod_jk/Tomcat for a long time on production servers  
  with load balancing/failover (and with high traffic sites) and I'm  
  sure it's not 30% slower than a pure Tomcat.
 
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: mod_jk performance

[Andrew Miehs]

We run F5 BigIPs as our loadbalancers, and have seperated images, etc  
onto another server


IE: i.domain.com for images, and www.domain.com for dynamic content.

F5 provides a feature call iRules to do the splitting between hosts  
for you, but I would

NOT use this on a high traffic site.

Andrew

On Sep 14, 2005, at 2:58 PM, Lionel Farbos wrote:

But, in a web site, there is never only JSPs : there is a lot of  
static files (images, css, js, ...)
So, if you don't have a apache in the frontend to deliver theses  
static files, there is an overload for the TC server...


So, your tests stressed only light JSPs or a real site ?
and what is your solution for load-balancing/failover ?

On Wed, 14 Sep 2005 14:50:52 +0200
Andrew Miehs [EMAIL PROTECTED] wrote:



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: mod_jk performance

[KEREM ERKAN]

Well, mod_jk  1.2.10 seems slower than 1.2.10 when stress tested. The tests
completed in more time. I do not have the actual test results, because we
have been using 1.2.10 for several months, maybe I can send them when I test
1.2.14.

By the way mod_jk site mentions 1.2.13 as its testing version. Is there a
1.2.14 really or did you write 14 by mistake?

Cheers,

Kerem

 -Original Message-
 From: Lionel Farbos [mailto:[EMAIL PROTECTED] 
 Sent: Wednesday, September 14, 2005 3:51 PM
 To: Tomcat Users List
 Cc: KEREM ERKAN
 Subject: Re: mod_jk performance
 
 On Wed, 14 Sep 2005 14:55:08 +0300
 KEREM ERKAN [EMAIL PROTECTED] wrote:
 
   Mod_jk  1.2.10 had some performance problems but I did not 
  thoroughly test why.
 
 Is is proved ? Where do you find this ?
 I tested mod_jk 1.2.14 (but not stressed it) and it seems to 
 be a good version...
 What sort of performance problems do you mention ?
 

Re: mod_jk performance

[Lionel Farbos]

On Wed, 14 Sep 2005 16:16:59 +0300
KEREM ERKAN [EMAIL PROTECTED] wrote:

 Well, mod_jk  1.2.10 seems slower than 1.2.10 when stress tested. The tests
 completed in more time. I do not have the actual test results, because we
 have been using 1.2.10 for several months, maybe I can send them when I test
 1.2.14.
 
I'm interested in such tests (or a link if it exists).

 By the way mod_jk site mentions 1.2.13 as its testing version. Is there a
 1.2.14 really or did you write 14 by mistake?
 
I wanted to say mod_jk 1.2.14 : it's not a mistake...
but I don't understand what this meens ...?!?

I receive this mail (see Announce_mod_jk_1.2.14 above) on July 26th and, at 
this date, the mod_jk site mentioned 1.2.14 as the latest and stable version 
(you can see the content of this version on the changelog : 
http://jakarta.apache.org/tomcat/connectors-doc/changelog.html)

Now, the mod_jk site mention 1.2.13 as the latest stable version...
But the latest source version is : 1.2.14 !!!
http://www.apache.org/dist/jakarta/tomcat-connectors/jk/source/

So, Mladen, what this means ? What is the current stable version ?

-
Announce_mod_jk_1.2.14 received on July 26th :
-
Delivery-date: Tue, 26 Jul 2005 23:35:01 +0200
List-Post: mailto:announcements@jakarta.apache.org
List-Id: Jakarta Announcements List announcements.jakarta.apache.org
Reply-To: Jakarta General List general@jakarta.apache.org
Delivered-To: mailing list announcements@jakarta.apache.org
Received: (qmail 226 invoked by uid 99); 26 Jul 2005 21:26:36 -
Date: Tue, 26 Jul 2005 23:26:31 +0200
From: Jean-frederic Clere [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.3) Gecko/20041023
X-Accept-Language: en, fr
MIME-Version: 1.0
To: announcements@jakarta.apache.org,  tomcat-user@jakarta.apache.org, 
 tomcat-dev@jakarta.apache.org,  announce@apache.org
Subject: [ANN] Apache Tomcat mod_jk 1.2.14 Web Server Connector released
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
X-Virus-Checked: Checked by ClamAV on apache.org

The Apache Tomcat team is pleased to announce the release of version 1.2.14 of 
the 
Apache Tomcat mod_jk web server connector.

Tomcat is the reference implementation of a web application server which 
implements
the Java Servlet and JavaServer Pages specifications.

mod_jk is a connector which allows a web server such as Apache HTTPD to act as a
front end to the Tomcat web application server. 

This version fixes a number of minor bugs.

See http://jakarta.apache.org/tomcat/connectors-doc/changelog.html for a 
complete list of changes.

Source distribtions can be downloaded from an Apache Software Foundation mirror 
at: (they are named jakarta-tomcat-connectors-1.2.14.1-src.tar.gz and 
jakarta-tomcat-connectors-1.2.14.1-src.zip)

http://jakarta.apache.org/site/sourceindex.cgi

Binary distributions for a number of different operating systems and
web servers can be downloaded from an Apache Software Foundation mirror at:

http://jakarta.apache.org/site/binindex.cgi

Documentation for using mod_jk with Tomcat 3.3, 4.1, 5.0 and 5.5 can be found 
at:

http://jakarta.apache.org/tomcat/

The Apache Tomcat team.
-

 Cheers,
 
 Kerem
 
  -Original Message-
  From: Lionel Farbos [mailto:[EMAIL PROTECTED] 
  Sent: Wednesday, September 14, 2005 3:51 PM
  To: Tomcat Users List
  Cc: KEREM ERKAN
  Subject: Re: mod_jk performance
  
  On Wed, 14 Sep 2005 14:55:08 +0300
  KEREM ERKAN [EMAIL PROTECTED] wrote:
  
Mod_jk  1.2.10 had some performance problems but I did not 
   thoroughly test why.
  
  Is is proved ? Where do you find this ?
  I tested mod_jk 1.2.14 (but not stressed it) and it seems to 
  be a good version...
  What sort of performance problems do you mention ?
  
 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: mod_jk performance

[Lionel Farbos]

So, I think your solution with F5 BigIPs-Tomcat is equivalent to the solution 
with Apache/mod_jk-Tomcat
But the last is free
and I don't know the difference in performances between the 2 solutions.

On Wed, 14 Sep 2005 15:14:01 +0200
Andrew Miehs [EMAIL PROTECTED] wrote:

 We run F5 BigIPs as our loadbalancers, and have seperated images, etc  
 onto another server
 
 IE: i.domain.com for images, and www.domain.com for dynamic content.
 
 F5 provides a feature call iRules to do the splitting between hosts  
 for you, but I would
 NOT use this on a high traffic site.
 
 Andrew
 
 On Sep 14, 2005, at 2:58 PM, Lionel Farbos wrote:
 
  But, in a web site, there is never only JSPs : there is a lot of  
  static files (images, css, js, ...)
  So, if you don't have a apache in the frontend to deliver theses  
  static files, there is an overload for the TC server...
 
  So, your tests stressed only light JSPs or a real site ?
  and what is your solution for load-balancing/failover ?
 
  On Wed, 14 Sep 2005 14:50:52 +0200
  Andrew Miehs [EMAIL PROTECTED] wrote:
 
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: mod_jk performance

[KEREM ERKAN]

  Well, mod_jk  1.2.10 seems slower than 1.2.10 when stress 
 tested. The 
  tests completed in more time. I do not have the actual test 
 results, 
  because we have been using 1.2.10 for several months, maybe 
 I can send 
  them when I test 1.2.14.
  
 I'm interested in such tests (or a link if it exists).

You can try Microsoft's Web Stress Tool which is free but it is old. I am
also actually searching for a better stress tool.

http://www.microsoft.com/downloads/details.aspx?FamilyID=E2C0585A-062A-439E-
A67D-75A89AA36495displaylang=en

 
  By the way mod_jk site mentions 1.2.13 as its testing version. Is 
  there a
  1.2.14 really or did you write 14 by mistake?
  
 I wanted to say mod_jk 1.2.14 : it's not a mistake...
 but I don't understand what this meens ...?!?

It seems there is a confusion in mod_jk's own site :-) I will download and
compile 1.2.14 in a spare time and see how it performs.

Cheers,

Kerem


smime.p7s
Description: S/MIME cryptographic signature

Re: mod_jk performance

[Lionel Farbos]

On Wed, 14 Sep 2005 17:27:29 +0300
KEREM ERKAN [EMAIL PROTECTED] wrote:

 
   Well, mod_jk  1.2.10 seems slower than 1.2.10 when stress 
  tested. The 
   tests completed in more time. I do not have the actual test 
  results, 
   because we have been using 1.2.10 for several months, maybe 
  I can send 
   them when I test 1.2.14.
   
  I'm interested in such tests (or a link if it exists).
 
 You can try Microsoft's Web Stress Tool which is free but it is old. I am
 also actually searching for a better stress tool.
 
 http://www.microsoft.com/downloads/details.aspx?FamilyID=E2C0585A-062A-439E-
 A67D-75A89AA36495displaylang=en

I don't search a Stress Tool; I say I'm interest in the result of the stress.

Another free Stress Tool is JMeter (http://jakarta.apache.org/jmeter/)
Under Linux, I also used httperf 
(http://www.hpl.hp.com/research/linux/httperf/) and autobench 
(http://www.xenoclast.org/autobench/)

Regards.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: mod_jk performance

[KEREM ERKAN]

 

 -Original Message-
 From: Lionel Farbos [mailto:[EMAIL PROTECTED] 
 Sent: Wednesday, September 14, 2005 5:49 PM
 To: Tomcat Users List
 Cc: KEREM ERKAN
 Subject: Re: mod_jk performance
 
 On Wed, 14 Sep 2005 17:27:29 +0300
 KEREM ERKAN [EMAIL PROTECTED] wrote:
 
  
Well, mod_jk  1.2.10 seems slower than 1.2.10 when stress
   tested. The
tests completed in more time. I do not have the actual test
   results,
because we have been using 1.2.10 for several months, maybe
   I can send
them when I test 1.2.14.

   I'm interested in such tests (or a link if it exists).
  
  You can try Microsoft's Web Stress Tool which is free but 
 it is old. I 
  am also actually searching for a better stress tool.
  
  
 http://www.microsoft.com/downloads/details.aspx?FamilyID=E2C0585A-062A
  -439E-
  A67D-75A89AA36495displaylang=en
 
 I don't search a Stress Tool; I say I'm interest in the 
 result of the stress.

Well as I said, I do not have the results for now, but when I test 1.2.14, I
will surely share the results with the list.

Cheers,

Kerem


smime.p7s
Description: S/MIME cryptographic signature

Re: mod_jk performance

[Mark Thomas]

KEREM ERKAN wrote:

Tomcat is harder to configure and -sadly- it has a far worse documentation
than Apache (for now).


I look forward to seeing your documentation patches in Bugzilla ;)

Mark


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: mod_jk performance

[Xuekun Hu]

Well since I don't understand German, I don't konw how he tested.
However in my stress testing which lots of static and JSPs, I found
Apache + mod_jk performance is a littlle higher than TOMCAT only. I
configured Apache with mod_cache.

So I think only handling JSPs, TC only could be better than Apache +
mod_jk. However in the real world, there is never only JSPs, there
must have lots of static files.

Thx, Xuekun

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

mod_jk and text/plain

[Eugeny N Dzhurinsky]

I have a problem with the application resources, mapped with the JkMount. For
some reason httpd server threats the content-type as text/plain, and ignores
the text/html set by tomcat.

any ideas how to get rid of that?

Tomcat 4.1.31, mod_jk 1.2.14.1, Apache httpd 1.3
Defaultcontent is commented out in the httpd.conf

-- 
Eugene N Dzhurinsky

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: mod_jk and text/plain

[Eugeny N Dzhurinsky]

On Wed, Sep 07, 2005 at 06:37:46PM +0300, Eugeny N Dzhurinsky wrote:
 I have a problem with the application resources, mapped with the JkMount. For
 some reason httpd server threats the content-type as text/plain, and ignores
 the text/html set by tomcat.
 
 any ideas how to get rid of that?
 
 Tomcat 4.1.31, mod_jk 1.2.14.1, Apache httpd 1.3
 Defaultcontent is commented out in the httpd.conf

I added .htaccess file with the DefaultType text/html to the WEB application 
root, 
and everything seems to work fine now. Also I have servlet mapping to 
the /some URI path, and it won't work, but after I created empty file some in
the root of WEB application - it start to resolve :)

A lot of crutches for simply tasks, huh :)

-- 
Eugene N Dzhurinsky

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: Building Mod_jk for HP-UX fails

[Ivo Van Den Maagdenberg]

amber# /home/amaris/ivdmaagden/gmake/bin/make --version

GNU Make version 3.79.1, by Richard Stallman and Roland McGrath.
Built for hppa2.0w-hp-hpux11.11
Copyright (C) 1988, 89, 90, 91, 92, 93, 94, 95, 96, 97, 98, 99, 2000
Free Software Foundation, Inc.
This is free software; see the source for copying conditions.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.

Report bugs to bug-make@gnu.org.

And for gcc

 amber# /usr/local/bin/gcc --version
gcc (GCC) 3.3.3
Copyright (C) 2003 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is
NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR
PURPOSE.


 -Oorspronkelijk bericht-
 Van: David Rees [mailto:[EMAIL PROTECTED] 
 Verzonden: donderdag 1 september 2005 22:40
 Aan: Tomcat Users List
 Onderwerp: Re: Building Mod_jk for HP-UX fails
 
 On 8/30/05, Ivo Van Den Maagdenberg
 [EMAIL PROTECTED] 
  After the jk/native/common directory is built, make does seems not 
  pass through the jk/native/apache-1.3 directory properly. I would 
  appreciate some help in getting make this to work.
 
 snip
  
  Make output below:
  
  Making all in apache-1.3
  Make: line 23: syntax error.  Stop.
  *** Error exit code 1
 
 What version of make are you using?  Are you using GNU make?  
 If not, try that.
 
 -Dave
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 

___

Deze e-mail en alle gekoppelde bestanden zijn officiele documenten van het 
Gemeentelijk Havenbedrijf Antwerpen en kunnen vertrouwelijke of persoonlijke 
informatie bevatten. Gelieve de afzender onmiddellijk via e-mail of telefonisch 
te verwittigen als u deze e-mail per vergissing heeft ontvangen en verwijder 
vervolgens de e-mail zonder deze te lezen, te reproduceren, te verspreiden of 
te ontsluiten naar derden. Het Gemeentelijk Havenbedrijf Antwerpen is op geen 
enkele manier verantwoordelijk voor fouten of onnauwkeurigheden in de inhoud 
van deze e-mail. Het Gemeentelijk Havenbedrijf Antwerpen kan niet aansprakelijk 
gesteld worden voor directe of indirecte schade, verlies of ongemak veroorzaakt 
als gevolg van een onnauwkeurigheid of fout in deze e-mail. --- English 
Translation: This e-mail and all attached files are official documents of 
Antwerp Port Authority and may contain confidential or personal information. If 
you have received this e-mail in error, you are asked to inform the sender by 
e-mail or telephone immediately, and to remove it from your system without 
reading or reproducing it or passing it on to other parties. Antwerp Port 
Authority is in no way responsible for any errors or inaccuracies in the 
contents of this e-mail, nor can it be held liable for any direct or indirect 
loss, damage or inconvenience arising from any such errors or inaccuracies. 
[GHA#Disclaimer]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Building Mod_jk for HP-UX fails

[David Rees]

On 8/30/05, Ivo Van Den Maagdenberg
[EMAIL PROTECTED] 
 After the jk/native/common directory is built, make does seems not pass
 through the jk/native/apache-1.3 directory properly. I would appreciate
 some help in getting make this to work.

snip
 
 Make output below:
 
 Making all in apache-1.3
 Make: line 23: syntax error.  Stop.
 *** Error exit code 1

What version of make are you using?  Are you using GNU make?  If not, try that.

-Dave

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

mod_jk: Hot Standby and Load Balance

[Mott Leroy]

Due to some differences in our applications, some of them can be truly 
load balanced, and some of them really cannot (yet). That is, some of 
our applications can be (and have been) truly load balanced, and others 
need (and only allow) simple failover support (hot standby). I noticed 
that workers now support both possibilities (using disabled and 
redirect flags to support hot standby).


What I'd like to do ultimately is have a hot standby load balancer and 
as well as a normal load balancer, but it doesn't seem like that's 
possible. From what I understand, you can really only have 1 load 
balanced worker per tomcat instance because it must match the jvmRoute 
of that instance -- having one worker that's disabled and one that's not 
doesn't seem possible.


So if I define a load balance worker as:

# traditional load balance worker
worker.lb_tala_build.type=ajp13
worker.lb_tala_build.host=tala
worker.lb_tala_build.port=8000
worker.lb_tala_build.lbfactor=1
worker.lb_tala_build.socket_keepalive=1
worker.lb_tala_build.recycle_timeout=300

I cannot really define a second load balanced worker like below (b/c no 
matching jvmRoute)


# a hot standby worker based on the worker above
worker.lb_tala_build2.type=ajp13
worker.lb_tala_build2.host=tala
worker.lb_tala_build2.port=8000
worker.lb_tala_build2.lbfactor=1
worker.lb_tala_build2.socket_keepalive=1
worker.lb_tala_build2.recycle_timeout=300
worker.lb_tala_build2.disabled=True 

Is anyone familiar with this setup of have any ideas how it could be 
achieved? (the same problem exists for what would be the Primary 
server, as it would need a worker that redirects and one that doesn't)


Ps -

Being able to specify the jvmRoute separately would solve this problem:

worker.lb_tala_build2.jvmRoute=lb_tala_build



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: mod_jk: Hot Standby and Load Balance

[Guernsey, Byron \(GE Consumer Industrial\)]

I believe you can specify the jvmRoute separately by using the domain
attribute, but I'm not sure I see how this would help?

Byron
 

-Original Message-
From: Mott Leroy [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, August 31, 2005 11:03 AM
To: Tomcat Users List
Subject: mod_jk: Hot Standby and Load Balance

Due to some differences in our applications, some of them can be truly
load balanced, and some of them really cannot (yet). That is, some of
our applications can be (and have been) truly load balanced, and others
need (and only allow) simple failover support (hot standby). I noticed
that workers now support both possibilities (using disabled and
redirect flags to support hot standby).

What I'd like to do ultimately is have a hot standby load balancer and
as well as a normal load balancer, but it doesn't seem like that's
possible. From what I understand, you can really only have 1 load
balanced worker per tomcat instance because it must match the jvmRoute
of that instance -- having one worker that's disabled and one that's not
doesn't seem possible.

So if I define a load balance worker as:

# traditional load balance worker
worker.lb_tala_build.type=ajp13
worker.lb_tala_build.host=tala
worker.lb_tala_build.port=8000
worker.lb_tala_build.lbfactor=1
worker.lb_tala_build.socket_keepalive=1
worker.lb_tala_build.recycle_timeout=300

I cannot really define a second load balanced worker like below (b/c no
matching jvmRoute)

# a hot standby worker based on the worker above
worker.lb_tala_build2.type=ajp13
worker.lb_tala_build2.host=tala
worker.lb_tala_build2.port=8000
worker.lb_tala_build2.lbfactor=1
worker.lb_tala_build2.socket_keepalive=1
worker.lb_tala_build2.recycle_timeout=300
worker.lb_tala_build2.disabled=True 

Is anyone familiar with this setup of have any ideas how it could be
achieved? (the same problem exists for what would be the Primary 
server, as it would need a worker that redirects and one that doesn't)

Ps -

Being able to specify the jvmRoute separately would solve this problem:

worker.lb_tala_build2.jvmRoute=lb_tala_build



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: mod_jk: Hot Standby and Load Balance

[Mott Leroy]

Well, I was thinking of using something like (truncated for clarity):

# load balanced
worker.lb_traditional.type=lb
worker.lb_traditional.balance_workers=lb_worker1,lb_worker2
worker.lb_traditional.sticky_session=true

# workers 1 and 2 are load balanced
worker.lb_worker1.type=ajp13
worker.lb_worker1.host=server1
worker.lb_worker1.domain=theJRMRoute

worker.lb_worker2.type=ajp13
worker.lb_worker2.host=server2
worker.lb_worker2.domain=theJRMRoute

# standby setup
worker.lb_standby.type=lb
worker.lb_standby.balance_workers=lb_worker3,lb_worker4
worker.lb_standby.sticky_session=true

# workers 4 is hot standby for worker 3
worker.lb_worker3.type=ajp13
worker.lb_worker3.host=server1
worker.lb_worker3.domain=theJRMRoute
worker.lb_worker3.redirect=worker4

worker.lb_worker4.type=ajp13
worker.lb_worker4.host=server2
worker.lb_worker4.domain=theJRMRoute
worker.lb_worker4.disabled=True

Guernsey, Byron (GE Consumer  Industrial) wrote:

I believe you can specify the jvmRoute separately by using the domain
attribute, but I'm not sure I see how this would help?

Byron
 


-Original Message-
From: Mott Leroy [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, August 31, 2005 11:03 AM

To: Tomcat Users List
Subject: mod_jk: Hot Standby and Load Balance

Due to some differences in our applications, some of them can be truly
load balanced, and some of them really cannot (yet). That is, some of
our applications can be (and have been) truly load balanced, and others
need (and only allow) simple failover support (hot standby). I noticed
that workers now support both possibilities (using disabled and
redirect flags to support hot standby).

What I'd like to do ultimately is have a hot standby load balancer and
as well as a normal load balancer, but it doesn't seem like that's
possible. From what I understand, you can really only have 1 load
balanced worker per tomcat instance because it must match the jvmRoute
of that instance -- having one worker that's disabled and one that's not
doesn't seem possible.

So if I define a load balance worker as:

# traditional load balance worker
worker.lb_tala_build.type=ajp13
worker.lb_tala_build.host=tala
worker.lb_tala_build.port=8000
worker.lb_tala_build.lbfactor=1
worker.lb_tala_build.socket_keepalive=1
worker.lb_tala_build.recycle_timeout=300

I cannot really define a second load balanced worker like below (b/c no
matching jvmRoute)

# a hot standby worker based on the worker above
worker.lb_tala_build2.type=ajp13
worker.lb_tala_build2.host=tala
worker.lb_tala_build2.port=8000
worker.lb_tala_build2.lbfactor=1
worker.lb_tala_build2.socket_keepalive=1
worker.lb_tala_build2.recycle_timeout=300
worker.lb_tala_build2.disabled=True 

Is anyone familiar with this setup of have any ideas how it could be
achieved? (the same problem exists for what would be the Primary 
server, as it would need a worker that redirects and one that doesn't)


Ps -

Being able to specify the jvmRoute separately would solve this problem:

worker.lb_tala_build2.jvmRoute=lb_tala_build



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: mod_jk: Hot Standby and Load Balance

[Rainer Jung]

I think having multiple load balancing workers for the same group of
target servers is not a problem.

You simply define load balancers e.g. lb1, lb2 etc.

Which load balancer is chosen is determined by your JkMount directives. So
if you have different apps app1, app2 etc. on your tomcats having
incompatible balancing requirements you simply use

JkMount /app1/* lb1
JkMount /app2/* lb2

etc.

The balanced workers behind lb1, lb2 etc. are allowed to have the same
name, because each load balancer has it's own list of balanced workers
with associated attributes. I expect no problem from a clash of names of
balanced workers in different balancing workers.

So there would be no need of having multiple jvmRoute for a single tomcat
instance.


 Well, I was thinking of using something like (truncated for clarity):

 # load balanced
 worker.lb_traditional.type=lb
 worker.lb_traditional.balance_workers=lb_worker1,lb_worker2
 worker.lb_traditional.sticky_session=true

 # workers 1 and 2 are load balanced
 worker.lb_worker1.type=ajp13
 worker.lb_worker1.host=server1
 worker.lb_worker1.domain=theJRMRoute

 worker.lb_worker2.type=ajp13
 worker.lb_worker2.host=server2
 worker.lb_worker2.domain=theJRMRoute

 # standby setup
 worker.lb_standby.type=lb
 worker.lb_standby.balance_workers=lb_worker3,lb_worker4
 worker.lb_standby.sticky_session=true

 # workers 4 is hot standby for worker 3
 worker.lb_worker3.type=ajp13
 worker.lb_worker3.host=server1
 worker.lb_worker3.domain=theJRMRoute
 worker.lb_worker3.redirect=worker4

 worker.lb_worker4.type=ajp13
 worker.lb_worker4.host=server2
 worker.lb_worker4.domain=theJRMRoute
 worker.lb_worker4.disabled=True

 Guernsey, Byron (GE Consumer  Industrial) wrote:
 I believe you can specify the jvmRoute separately by using the domain
 attribute, but I'm not sure I see how this would help?

 Byron


 -Original Message-
 From: Mott Leroy [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, August 31, 2005 11:03 AM
 To: Tomcat Users List
 Subject: mod_jk: Hot Standby and Load Balance

 Due to some differences in our applications, some of them can be truly
 load balanced, and some of them really cannot (yet). That is, some of
 our applications can be (and have been) truly load balanced, and others
 need (and only allow) simple failover support (hot standby). I noticed
 that workers now support both possibilities (using disabled and
 redirect flags to support hot standby).

 What I'd like to do ultimately is have a hot standby load balancer and
 as well as a normal load balancer, but it doesn't seem like that's
 possible. From what I understand, you can really only have 1 load
 balanced worker per tomcat instance because it must match the jvmRoute
 of that instance -- having one worker that's disabled and one that's not
 doesn't seem possible.

 So if I define a load balance worker as:

 # traditional load balance worker
 worker.lb_tala_build.type=ajp13
 worker.lb_tala_build.host=tala
 worker.lb_tala_build.port=8000
 worker.lb_tala_build.lbfactor=1
 worker.lb_tala_build.socket_keepalive=1
 worker.lb_tala_build.recycle_timeout=300

 I cannot really define a second load balanced worker like below (b/c no
 matching jvmRoute)

 # a hot standby worker based on the worker above
 worker.lb_tala_build2.type=ajp13
 worker.lb_tala_build2.host=tala
 worker.lb_tala_build2.port=8000
 worker.lb_tala_build2.lbfactor=1
 worker.lb_tala_build2.socket_keepalive=1
 worker.lb_tala_build2.recycle_timeout=300
 worker.lb_tala_build2.disabled=True

 Is anyone familiar with this setup of have any ideas how it could be
 achieved? (the same problem exists for what would be the Primary
 server, as it would need a worker that redirects and one that doesn't)

 Ps -

 Being able to specify the jvmRoute separately would solve this problem:

 worker.lb_tala_build2.jvmRoute=lb_tala_build



 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]




 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]





 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: mod_jk: Hot Standby and Load Balance

[Mott Leroy]

Rainer Jung wrote:

The balanced workers behind lb1, lb2 etc. are allowed to have the same
name, because each load balancer has it's own list of balanced workers
with associated attributes. I expect no problem from a clash of names of
balanced workers in different balancing workers.


I must be missing something obvious here. I am with you on the JKMount 
part, but I just don't see how the name clash isn't an issue for 
worker.properties. Simplifying again ...


# as per your suggestion ... where worker1 and worker2 are jvmRoutes
worker.lb1.balanced_workers=worker1,worker2
worker.lb2.balanced_workers=worker1,worker2

# the balanced workers ... which should they choose ... ?
worker.worker1 (failover version)
worker.worker1 (not failover version)
worker.worker2 (standby version)
worker.worker2 (non-standby version)

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: mod_jk: Hot Standby and Load Balance

[Rainer Jung]

Of course you are right (and for me it seems to be too late today).

So I agree: you either find out how to use different jvmRoutes in a single
instance or you try to find a workarounf with the domain attribute:

If a load balancer does not find a worker with the correct name
(=jvmRoute), it will next use a worker whose domain name is equal to the
jvmRoute. But this will not be very efficient, because every request will
first look for the correct worker and only after that check for the
domain. Also I'm not sure, how this second class worker will behave, if
you stopp it with respect to it's redirect etc. attributes.

Sorry!

 Rainer Jung wrote:
 The balanced workers behind lb1, lb2 etc. are allowed to have the same
 name, because each load balancer has it's own list of balanced workers
 with associated attributes. I expect no problem from a clash of names of
 balanced workers in different balancing workers.

 I must be missing something obvious here. I am with you on the JKMount
 part, but I just don't see how the name clash isn't an issue for
 worker.properties. Simplifying again ...

 # as per your suggestion ... where worker1 and worker2 are jvmRoutes
 worker.lb1.balanced_workers=worker1,worker2
 worker.lb2.balanced_workers=worker1,worker2

 # the balanced workers ... which should they choose ... ?
 worker.worker1 (failover version)
 worker.worker1 (not failover version)
 worker.worker2 (standby version)
 worker.worker2 (non-standby version)

 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Building Mod_jk for HP-UX fails

[Ivo Van Den Maagdenberg]

Hi,

An HP-UX 11.11 build for mod_jk seems to be missing from
http://www.apache.org/dist/jakarta/tomcat-connectors/jk/binaries/
I have attempted to compile mod_jk 1.2.14-1 myself. Apache 1.3.29 is my
target. 

After the jk/native/common directory is built, make does seems not pass
through the jk/native/apache-1.3 directory properly. I would appreciate
some help in getting make this to work.

First 25 lines of Makefile:

## configure should make the Makefile out of this file.

srcdir=.
top_srcdir=..

APXS=/usr/local/apache/bin/apxs
OS=
JAVA_HOME=
CP=/usr/bin/cp
APACHE_DIR=/usr/local/apache
MKDIR=/usr/bin/mkdir
DESTDIR=/usr/local/apache
LIBTOOL=$(SHELL) $(top_builddir)/libtool
CP=/usr/bin/cp
CC=/usr/local/bin/gcc

top_builddir=..

OEXT=.lo
libexecdir=${APACHE_DIR}/libexec
JK_DIR := ..
BUILD_DIR = ${JK_DIR}/../build/jk/apache13

APACHE_FILES = Makefile.tmpl Makefile.libdir libjk.module

Make output below:

Making all in apache-1.3
Make: line 23: syntax error.  Stop.
*** Error exit code 1




___

Deze e-mail en alle gekoppelde bestanden zijn officiele documenten van het 
Gemeentelijk Havenbedrijf Antwerpen en kunnen vertrouwelijke of persoonlijke 
informatie bevatten. Gelieve de afzender onmiddellijk via e-mail of telefonisch 
te verwittigen als u deze e-mail per vergissing heeft ontvangen en verwijder 
vervolgens de e-mail zonder deze te lezen, te reproduceren, te verspreiden of 
te ontsluiten naar derden. Het Gemeentelijk Havenbedrijf Antwerpen is op geen 
enkele manier verantwoordelijk voor fouten of onnauwkeurigheden in de inhoud 
van deze e-mail. Het Gemeentelijk Havenbedrijf Antwerpen kan niet aansprakelijk 
gesteld worden voor directe of indirecte schade, verlies of ongemak veroorzaakt 
als gevolg van een onnauwkeurigheid of fout in deze e-mail. --- English 
Translation: This e-mail and all attached files are official documents of 
Antwerp Port Authority and may contain confidential or personal information. If 
you have received this e-mail in error, you are asked to inform the sender by 
e-mail or telephone immediately, and to remove it from your system without 
reading or reproducing it or passing it on to other parties. Antwerp Port 
Authority is in no way responsible for any errors or inaccuracies in the 
contents of this e-mail, nor can it be held liable for any direct or indirect 
loss, damage or inconvenience arising from any such errors or inaccuracies. 
[GHA#Disclaimer]

Loadbalancing issues with mod_jk 1.2.14

[Andreas Oesterer]

I tried to upgrade from 1.2.8 to 1.2.14 this week. I
must say that the behavior of mod_jk has changed quite
a bit.

Especially troublesome is that the LB seems less
equally distributing in 1.2.14 than it was in 1.2.8.
Essentilly I experienced some Tomcats die under the
load while others where bored.

I know there are new settings in 1.2.14 for
loadbalancing, namely lock and method.

Can someone advise me which combination of flags would
best recreate the loadbalancing as it was under 1.2.8?
It is not that I want to stay on 1.2.8 but at this
point I can't get 1.2.14 to run stable enough under
high load.

Thanks, Andreas

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: session problems when using mod_jk (1.2.14) load balancing

[Edgar Alves]

Hi,
  I'm using the domain property in the same situation as the one
discussed in this thread. Any reason why I shouldn't use the domain
property and rely on the worker names instead?
  Thanks in advance,

  -- Edgar Alves

Rainer Jung wrote:

That should not work!

The correct way to configure session stickyness is to use jvmRoute (which
you already did) and then giving the workers the same names as the
jvmRoute. That is instead of bl_worker_dev use dev_alexis and instead
of bl_worker_noah use noah_alexis as the worker names.

You should check, that the URLs produced by your application include the
;jsessionid=32Characters.jvmRoute or - in case you use cookies - the
same info is in your session cookie.

mod_jk then automatically strips the jvmRoute part from the session
identifier and lloks for a worker of the same name.

You will only need to use the domain attribute in case you have a lot of
tomcat instances and some of them have the sessions replicated, others
not. Then you can give all members of a replication domain the same domain
name and mod_jk will know, that in case the correct worker is down, which
alternatives are good.

  

Beautiful - worked like a charm. That might take the cake as far as
longest question to quickest, shortest answer goes. ha. Thanks a bunch.

I might have to gripe about doucmentation in a second (nother thread)..

Noah


Edgar Alves wrote:


Try adding these two lines to worker.properties:
worker.bl_worker_dev.domain=dev_alexis
worker.bl_worker_noah.domain=noah_alexis

-- Edgar Alves
  




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: session problems when using mod_jk (1.2.14) load balancing

[Mladen Turk]

Edgar Alves wrote:

Hi,
  I'm using the domain property in the same situation as the one
discussed in this thread. Any reason why I shouldn't use the domain
property and rely on the worker names instead?


Domain is supposed to be used with multiple workers sharing the
same jvmRoute having session replication between them, thus
forming 'cluster groups' to lower the session data replication
transfer.

You can use the domain, but it's a trick rather then a proper
usage.

Regards,
Mladen.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: session problems when using mod_jk (1.2.14) load balancing

[Edgar Alves]

Hi Mladen,

  I've used the domain property because it seemed the more general
approach (i.e., supports clusters but can be used with a single worker).
What this thread got me curious about is if using the domain property in
this fashion is officially supported, or on the other hand if it can
only be used reliably with clusters.

  After reading the documentation
(http://jakarta.apache.org/tomcat/connectors-doc/config/workers.html), I
got the idea that using the domain property with only one worker
wouldn't be a trick but another way tell mod_jk which jvmRoute to use:
If sticky_session is used, then the domain name is used as session
route.. Naming the worker after the intended jvmRoute (even though it
used to be the only way) seems more of a trick than explicitly
specifying the jvmRoute with the domain property.

  However, since the same documention mentions that the domain property
is used for large systems with clustering, do you know of any side
effects (like lower performance) of using this approach as opposed to
simply naming the workers after the jvmRoute?

  -- Edgar Alves

Mladen Turk wrote:

 Edgar Alves wrote:

 Hi,
   I'm using the domain property in the same situation as the one
 discussed in this thread. Any reason why I shouldn't use the domain
 property and rely on the worker names instead?


 Domain is supposed to be used with multiple workers sharing the
 same jvmRoute having session replication between them, thus
 forming 'cluster groups' to lower the session data replication
 transfer.

 You can use the domain, but it's a trick rather then a proper
 usage.

 Regards,
 Mladen.




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: session problems when using mod_jk (1.2.14) load balancing

[Rainer Jung]

OK, thanks Mladen: I have to correct myself.

1) Traditional use

Until mod_jk 1.2.6 there was no concept of domains. You had to specify the
worker name to be exactly the same as the jvmRoute to make sticky sessions
work. This way of configuring stickyness is wel known to mod_jk users.

2) I introduced domains to allow mod_jk to make good failover decisions in
the case where you have many tomcats, but session replication only between
subset, like 2 Tomcat clusters with three instances each (T1_1, T1_2, ...,
T3_3) where T1_1, T1_2 and T1_3 replicate their sessions between each
other etc. Then you can configure a common domain name for T1_1, T1_2 and
T1_3 (e.g. T1) and is mod_jk is not able to correctly route a sticky
request (e.g. T1_1 goes down) it will choose another worker with the same
domain name. Moreover in this case it will load balance betweeen all those
workers (in my example between T1_2 and T1_3).

1) and 2) still work in 1.2.14.

3) Mladen improved mod_jk a lot and during that time introduced another
additional way of using the domain attribute: If stickyness for sessions
is required and mod_jk does not find a worker with the name of the
jvmRoute contained in the session id, then it will next try to find any
worker whose domain name is equal to the jvmRoute. If there are multiple
such workers, mod_jk loadbalances between them.

Summary: If there is a one-to-one relationship between jvmRoutes and
workers, there is no functional difference between giving the worker the
same name as the jvmRoute, or giving it the same domain attribute as the
jvmRoute. The first way is more compatible with what people used to do
since a long time and it will be marginally faster, because that check is
done first.

It's always good to look at the code, in fact when I first discovered the
use of the jvmRoute as a domain name in the code I thought it's a bug. I
now understand, that it's at least a feature :-)


 Hi Mladen,

   I've used the domain property because it seemed the more general
 approach (i.e., supports clusters but can be used with a single worker).
 What this thread got me curious about is if using the domain property in
 this fashion is officially supported, or on the other hand if it can
 only be used reliably with clusters.

   After reading the documentation
 (http://jakarta.apache.org/tomcat/connectors-doc/config/workers.html), I
 got the idea that using the domain property with only one worker
 wouldn't be a trick but another way tell mod_jk which jvmRoute to use:
 If sticky_session is used, then the domain name is used as session
 route.. Naming the worker after the intended jvmRoute (even though it
 used to be the only way) seems more of a trick than explicitly
 specifying the jvmRoute with the domain property.

   However, since the same documention mentions that the domain property
 is used for large systems with clustering, do you know of any side
 effects (like lower performance) of using this approach as opposed to
 simply naming the workers after the jvmRoute?

   -- Edgar Alves

 Mladen Turk wrote:

 Edgar Alves wrote:

 Hi,
   I'm using the domain property in the same situation as the one
 discussed in this thread. Any reason why I shouldn't use the domain
 property and rely on the worker names instead?


 Domain is supposed to be used with multiple workers sharing the
 same jvmRoute having session replication between them, thus
 forming 'cluster groups' to lower the session data replication
 transfer.

 You can use the domain, but it's a trick rather then a proper
 usage.

 Regards,
 Mladen.




 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

mod_jk Apache Permission Problem

[Jeshua Lacock]

Greetings,

I can't seem to make mod_jk connect successfully with Apache. Apache 
and Tomcat both works fine on their own (apache on :80 Tomcat on 
:8080), but I seem to be getting a permissions problem using mod_jk. I 
am able start Tomcat without special privileges, but when I try and 
start Apache as a non-privileged user (after starting Tomcat), I get 
the following error:


  (13)Permission denied: make_sock: could not bind to address 
[::]:80

  no listening sockets available, shutting down

Ideally I would like to be able to run both as a non-privileged user.

At any rate, if I either start both as root, or start Tomcat 
unprivileged and Apache with privileges, I end up getting the same 
error in the Apache 2 log:


  [Thu Aug 18 06:29:18 2005] [error] (13)Permission denied: 
apr_global_mutex_lock(jk_log_lock) failed
  [Thu Aug 18 06:29:19 2005] [notice] child pid 14821 exit signal 
Bus error (10)


It is strange because, my user account owns all of the files (I used 
chown -R to make sure). I have also tried running it as the root user 
with the same error, and changing all files to be owned by root.


I have read and followed available instructions to the best of my 
ability.


Any ideas? It seems like a simple permission problem, but I am not sure 
what might need special permissions.


Here is my Tomcat's startup information:

Using CATALINA_BASE:   /tmp/OpenOSX/OpenWeb/jakarta-tomcat-4.1.31
Using CATALINA_HOME:   /tmp/OpenOSX/OpenWeb/jakarta-tomcat-4.1.31
Using CATALINA_TMPDIR: 
/tmp/OpenOSX/OpenWeb/jakarta-tomcat-4.1.31/temp

Using JAVA_HOME:   /Library/Java/Home
Aug 18, 2005 6:28:40 AM org.apache.coyote.http11.Http11Protocol init
INFO: Initializing Coyote HTTP/1.1 on http-8080
Starting service Tomcat-Standalone
Apache Tomcat/4.1.31
Aug 18, 2005 6:28:44 AM 
org.apache.struts.util.PropertyMessageResources init
INFO: Initializing, config='org.apache.struts.util.LocalStrings', 
returnNull=true
Aug 18, 2005 6:28:44 AM 
org.apache.struts.util.PropertyMessageResources init
INFO: Initializing, 
config='org.apache.struts.action.ActionResources', returnNull=true
Aug 18, 2005 6:28:45 AM 
org.apache.struts.util.PropertyMessageResources init
INFO: Initializing, 
config='org.apache.webapp.admin.ApplicationResources', returnNull=true
Aug 18, 2005 6:28:53 AM org.apache.coyote.http11.Http11Protocol 
start

INFO: Starting Coyote HTTP/1.1 on http-8080
Aug 18, 2005 6:28:53 AM org.apache.jk.common.ChannelSocket init
INFO: JK2: ajp13 listening on /0.0.0.0:8009
Aug 18, 2005 6:28:53 AM org.apache.jk.server.JkMain start
INFO: Jk running ID=0 time=1/68  
config=/tmp/OpenOSX/OpenWeb/jakarta-tomcat-4.1.31/conf/jk2.properties

^CStopping service Tomcat-Standalone

Here is the pertinent mod_jk configuration from the httpd.conf:

LoadModule jk_module modules/mod_jk.so

JkWorkersFile 
/tmp/OpenOSX/OpenWeb//jakarta-tomcat-4.1.31/conf/workers.properties

JkLogFile /tmp/OpenOSX/OpenWeb/apache2/logs/mod_jk.log
JkLogLeveldebug

VirtualHost 127.0.0.1
DocumentRoot /tmp/OpenOSX/OpenWeb//jakarta-tomcat-4.1.31/webapps
ServerName localhost
JkMount /*.jsp ajp13
JkMount /examples/servlet/* ajp13
/VirtualHost

My workers.properties file:

workers.tomcat_home=/tmp/OpenOSX/OpenWeb/jakarta-tomcat-4.1.31
workers.java_home=/Library/Java/Home
ps=/
worker.list=ajp12, ajp13
worker.ajp13.port=8009
worker.ajp13.host=127.0.0.1
worker.ajp12.type=ajp13

I am running Apache/2.0.54 (Unix) DAV/2 PHP/5.0.4 mod_jk/1.2.14 
mod_ssl/2.0.54 OpenSSL/0.9.7b on Mac OS X 10.3.9, built from source.



Any hints/help would be GREATLY appreciated. I am willing to compensate 
for time.



Thanks,

Jeshua Lacock ___
Programmer/OwnerPhone:  877.240.1364
http://OpenOSX.com  Fax:415.462.6211
-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: mod_jk Apache Permission Problem

[Kyle]

I dunno if it's the same in Apache 1.3, but in Apache 2.x the example 
httpd.conf file has a pair of small IfModule tags showing how to run 
Apache under non-root user for diff. OS's.


Basically you have to start Apache as root and it will then switch over, 
or so the example file says. To do this irrespecitve of the modules 
being present or otherwise, I just deleted the IfModule Tags.


K

Jeshua Lacock wrote:


Greetings,

I can't seem to make mod_jk connect successfully with Apache. Apache and 
Tomcat both works fine on their own (apache on :80 Tomcat on :8080), but 
I seem to be getting a permissions problem using mod_jk. I am able start 
Tomcat without special privileges, but when I try and start Apache as a 
non-privileged user (after starting Tomcat), I get the following error:


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: mod_jk Apache Permission Problem

[Jeshua Lacock]

On Aug 18, 2005, at 5:45 PM, Kyle wrote:

I dunno if it's the same in Apache 1.3, but in Apache 2.x the example 
httpd.conf file has a pair of small IfModule tags showing how to run 
Apache under non-root user for diff. OS's.


Basically you have to start Apache as root and it will then switch 
over, or so the example file says. To do this irrespecitve of the 
modules being present or otherwise, I just deleted the IfModule 
Tags.


Kyle,

Thanks for the hint!

I changed the user from 'nobody' to 'www', and it now works.

Awesome! Thanks a million!


Cheers,

Jeshua Lacock ___
Programmer/OwnerPhone:  877.240.1364
http://OpenOSX.com  Fax:415.462.6211
-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

session problems when using mod_jk (1.2.14) load balancing

[Mott Leroy]

Hi -

I'm unable to get mod_jk load balancing working. The usual mod_jk setup 
works just fine, but using a load balancing worker however, is not. 
[Oddly, my webserver crashed during testing of this, but that could very 
well be unrelated]


The problem is with user sessions. The instances (nodes) do not seem to 
recognize an already established session with the user and are creating 
new sessions. It's possible that is a session-stickiness issue, but it 
appears like the requests are hitting the same instance, just not 
getting the previously established session. As a result, I can't even 
reliably login to my application.


I created a session listener for debugging purposes and it reports -no- 
destroyed sessions, but plenty of newly created sessions on both 
instances that make up the cluster. The session IDs, I noticed, have 
the jvmRoute name attached to them, which should be a good sign.


I have a webserver running Apache (1.3.33), mod_jk (1.2.14), and an 
application server running the cluster -- 2 instances tomcat (5.0.28) 
on different ports.


I added a unique jvmRoute to both instances in the server.xml:
Engine name=Catalina defaultHost=localhost jvmRoute=dev_alexis
Engine name=Catalina defaultHost=localhost jvmRoute=noah_alexis

My worker.properties loadbalancer settings:

worker.list=load_balancer_test

worker.load_balancer_test.type=lb
worker.load_balancer_test.balance_workers=bl_worker_dev,bl_worker_noah
worker.load_balancer_test.sticky_session=true
worker.load_balancer_test.sticky_session_force=false

worker.bl_worker_dev.type=ajp13
worker.bl_worker_dev.host=alexis
worker.bl_worker_dev.port=9003
worker.bl_worker_dev.lbfactor=1
worker.bl_worker_dev.socket_keepalive=1
worker.bl_worker_dev.recycle_timeout=300

worker.bl_worker_noah.type=ajp13
worker.bl_worker_noah.host=alexis
worker.bl_worker_noah.port=8063
worker.bl_worker_noah.lbfactor=3
worker.bl_worker_noah.socket_keepalive=1
worker.bl_worker_noah.recycle_timeout=300

Any ideas, things I could try would be much appreciated.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: session problems when using mod_jk (1.2.14) load balancing

[Edgar Alves]

Try adding these two lines to worker.properties:
worker.bl_worker_dev.domain=dev_alexis
worker.bl_worker_noah.domain=noah_alexis

-- Edgar Alves

Mott Leroy wrote:

 Hi -

 I'm unable to get mod_jk load balancing working. The usual mod_jk
 setup works just fine, but using a load balancing worker however, is
 not. [Oddly, my webserver crashed during testing of this, but that
 could very well be unrelated]

 The problem is with user sessions. The instances (nodes) do not seem
 to recognize an already established session with the user and are
 creating new sessions. It's possible that is a session-stickiness
 issue, but it appears like the requests are hitting the same instance,
 just not getting the previously established session. As a result, I
 can't even reliably login to my application.

 I created a session listener for debugging purposes and it reports
 -no- destroyed sessions, but plenty of newly created sessions on both
 instances that make up the cluster. The session IDs, I noticed, have
 the jvmRoute name attached to them, which should be a good sign.

 I have a webserver running Apache (1.3.33), mod_jk (1.2.14), and an
 application server running the cluster -- 2 instances tomcat
 (5.0.28) on different ports.

 I added a unique jvmRoute to both instances in the server.xml:
 Engine name=Catalina defaultHost=localhost jvmRoute=dev_alexis
 Engine name=Catalina defaultHost=localhost jvmRoute=noah_alexis

 My worker.properties loadbalancer settings:

 worker.list=load_balancer_test

 worker.load_balancer_test.type=lb
 worker.load_balancer_test.balance_workers=bl_worker_dev,bl_worker_noah
 worker.load_balancer_test.sticky_session=true
 worker.load_balancer_test.sticky_session_force=false

 worker.bl_worker_dev.type=ajp13
 worker.bl_worker_dev.host=alexis
 worker.bl_worker_dev.port=9003
 worker.bl_worker_dev.lbfactor=1
 worker.bl_worker_dev.socket_keepalive=1
 worker.bl_worker_dev.recycle_timeout=300

 worker.bl_worker_noah.type=ajp13
 worker.bl_worker_noah.host=alexis
 worker.bl_worker_noah.port=8063
 worker.bl_worker_noah.lbfactor=3
 worker.bl_worker_noah.socket_keepalive=1
 worker.bl_worker_noah.recycle_timeout=300

 Any ideas, things I could try would be much appreciated.

 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]







-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: session problems when using mod_jk (1.2.14) load balancing

[Mott Leroy]

Beautiful - worked like a charm. That might take the cake as far as 
longest question to quickest, shortest answer goes. ha. Thanks a bunch.


I might have to gripe about doucmentation in a second (nother thread)..

Noah


Edgar Alves wrote:

Try adding these two lines to worker.properties:
worker.bl_worker_dev.domain=dev_alexis
worker.bl_worker_noah.domain=noah_alexis

-- Edgar Alves

Mott Leroy wrote:



Hi -

I'm unable to get mod_jk load balancing working. The usual mod_jk
setup works just fine, but using a load balancing worker however, is
not. [Oddly, my webserver crashed during testing of this, but that
could very well be unrelated]

The problem is with user sessions. The instances (nodes) do not seem
to recognize an already established session with the user and are
creating new sessions. It's possible that is a session-stickiness
issue, but it appears like the requests are hitting the same instance,
just not getting the previously established session. As a result, I
can't even reliably login to my application.

I created a session listener for debugging purposes and it reports
-no- destroyed sessions, but plenty of newly created sessions on both
instances that make up the cluster. The session IDs, I noticed, have
the jvmRoute name attached to them, which should be a good sign.

I have a webserver running Apache (1.3.33), mod_jk (1.2.14), and an
application server running the cluster -- 2 instances tomcat
(5.0.28) on different ports.

I added a unique jvmRoute to both instances in the server.xml:
Engine name=Catalina defaultHost=localhost jvmRoute=dev_alexis
Engine name=Catalina defaultHost=localhost jvmRoute=noah_alexis

My worker.properties loadbalancer settings:

worker.list=load_balancer_test

worker.load_balancer_test.type=lb
worker.load_balancer_test.balance_workers=bl_worker_dev,bl_worker_noah
worker.load_balancer_test.sticky_session=true
worker.load_balancer_test.sticky_session_force=false

worker.bl_worker_dev.type=ajp13
worker.bl_worker_dev.host=alexis
worker.bl_worker_dev.port=9003
worker.bl_worker_dev.lbfactor=1
worker.bl_worker_dev.socket_keepalive=1
worker.bl_worker_dev.recycle_timeout=300

worker.bl_worker_noah.type=ajp13
worker.bl_worker_noah.host=alexis
worker.bl_worker_noah.port=8063
worker.bl_worker_noah.lbfactor=3
worker.bl_worker_noah.socket_keepalive=1
worker.bl_worker_noah.recycle_timeout=300

Any ideas, things I could try would be much appreciated.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]









-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

mod_jk documentation

[Mott Leroy]

Before I go gripe too, too much, let me just say that the mod_jk 
documentation has improved immensely since I start looking into it. Some 
of it might be simplied by the fact that I no longer consider jk2 in the 
picture which seemed to be adding some confusion.


I don't know who is responsible for updating the documentation, so 
thought I'd post here.


The documentation that I'm referring to is at:

http://jakarta.apache.org/tomcat/connectors-doc/index.html

load balancing page:
Well, the load balancing page is empty, which is ok, but a link to the 
majority of load balancing explanation on the worker.properties page 
would be nice.


domain property for a worker.
I had to use the domain property on a worker to get load balancing 
working, which corresponds to the jvmRoute. I didn't see any mention of 
jvmRoute or domain anywhere however in either the load balancing 
section or the general worker properties.


finally, and this may have annoyed me more than anything else -
all throughout the load balancing documentation there are red, bolded 
lines like These workers should not appear in the worker.list 
property! in reference to balance_workers. But then in the example, 
they do exactly what they said should NOT be done:

(bottom of this page)
http://jakarta.apache.org/tomcat/connectors-doc/howto/workers.html

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: session problems when using mod_jk (1.2.14) load balancing

[Rainer Jung]

That should not work!

The correct way to configure session stickyness is to use jvmRoute (which
you already did) and then giving the workers the same names as the
jvmRoute. That is instead of bl_worker_dev use dev_alexis and instead
of bl_worker_noah use noah_alexis as the worker names.

You should check, that the URLs produced by your application include the
;jsessionid=32Characters.jvmRoute or - in case you use cookies - the
same info is in your session cookie.

mod_jk then automatically strips the jvmRoute part from the session
identifier and lloks for a worker of the same name.

You will only need to use the domain attribute in case you have a lot of
tomcat instances and some of them have the sessions replicated, others
not. Then you can give all members of a replication domain the same domain
name and mod_jk will know, that in case the correct worker is down, which
alternatives are good.

 Beautiful - worked like a charm. That might take the cake as far as
 longest question to quickest, shortest answer goes. ha. Thanks a bunch.

 I might have to gripe about doucmentation in a second (nother thread)..

 Noah


 Edgar Alves wrote:
 Try adding these two lines to worker.properties:
 worker.bl_worker_dev.domain=dev_alexis
 worker.bl_worker_noah.domain=noah_alexis

 -- Edgar Alves

 Mott Leroy wrote:


Hi -

I'm unable to get mod_jk load balancing working. The usual mod_jk
setup works just fine, but using a load balancing worker however, is
not. [Oddly, my webserver crashed during testing of this, but that
could very well be unrelated]

The problem is with user sessions. The instances (nodes) do not seem
to recognize an already established session with the user and are
creating new sessions. It's possible that is a session-stickiness
issue, but it appears like the requests are hitting the same instance,
just not getting the previously established session. As a result, I
can't even reliably login to my application.

I created a session listener for debugging purposes and it reports
-no- destroyed sessions, but plenty of newly created sessions on both
instances that make up the cluster. The session IDs, I noticed, have
the jvmRoute name attached to them, which should be a good sign.

I have a webserver running Apache (1.3.33), mod_jk (1.2.14), and an
application server running the cluster -- 2 instances tomcat
(5.0.28) on different ports.

I added a unique jvmRoute to both instances in the server.xml:
Engine name=Catalina defaultHost=localhost jvmRoute=dev_alexis
Engine name=Catalina defaultHost=localhost jvmRoute=noah_alexis

My worker.properties loadbalancer settings:

worker.list=load_balancer_test

worker.load_balancer_test.type=lb
worker.load_balancer_test.balance_workers=bl_worker_dev,bl_worker_noah
worker.load_balancer_test.sticky_session=true
worker.load_balancer_test.sticky_session_force=false

worker.bl_worker_dev.type=ajp13
worker.bl_worker_dev.host=alexis
worker.bl_worker_dev.port=9003
worker.bl_worker_dev.lbfactor=1
worker.bl_worker_dev.socket_keepalive=1
worker.bl_worker_dev.recycle_timeout=300

worker.bl_worker_noah.type=ajp13
worker.bl_worker_noah.host=alexis
worker.bl_worker_noah.port=8063
worker.bl_worker_noah.lbfactor=3
worker.bl_worker_noah.socket_keepalive=1
worker.bl_worker_noah.recycle_timeout=300

Any ideas, things I could try would be much appreciated.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]








 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]





 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: session problems when using mod_jk (1.2.14) load balancing

[Mott Leroy]

Ok - noted. I changed it. It works without the domain as you noted. Thanks.

Rainer Jung wrote:

That should not work!

The correct way to configure session stickyness is to use jvmRoute (which
you already did) and then giving the workers the same names as the
jvmRoute. That is instead of bl_worker_dev use dev_alexis and instead
of bl_worker_noah use noah_alexis as the worker names.

You should check, that the URLs produced by your application include the
;jsessionid=32Characters.jvmRoute or - in case you use cookies - the
same info is in your session cookie.

mod_jk then automatically strips the jvmRoute part from the session
identifier and lloks for a worker of the same name.

You will only need to use the domain attribute in case you have a lot of
tomcat instances and some of them have the sessions replicated, others
not. Then you can give all members of a replication domain the same domain
name and mod_jk will know, that in case the correct worker is down, which
alternatives are good.



Beautiful - worked like a charm. That might take the cake as far as
longest question to quickest, shortest answer goes. ha. Thanks a bunch.

I might have to gripe about doucmentation in a second (nother thread)..

Noah


Edgar Alves wrote:


Try adding these two lines to worker.properties:
worker.bl_worker_dev.domain=dev_alexis
worker.bl_worker_noah.domain=noah_alexis

-- Edgar Alves

Mott Leroy wrote:




Hi -

I'm unable to get mod_jk load balancing working. The usual mod_jk
setup works just fine, but using a load balancing worker however, is
not. [Oddly, my webserver crashed during testing of this, but that
could very well be unrelated]

The problem is with user sessions. The instances (nodes) do not seem
to recognize an already established session with the user and are
creating new sessions. It's possible that is a session-stickiness
issue, but it appears like the requests are hitting the same instance,
just not getting the previously established session. As a result, I
can't even reliably login to my application.

I created a session listener for debugging purposes and it reports
-no- destroyed sessions, but plenty of newly created sessions on both
instances that make up the cluster. The session IDs, I noticed, have
the jvmRoute name attached to them, which should be a good sign.

I have a webserver running Apache (1.3.33), mod_jk (1.2.14), and an
application server running the cluster -- 2 instances tomcat
(5.0.28) on different ports.

I added a unique jvmRoute to both instances in the server.xml:
Engine name=Catalina defaultHost=localhost jvmRoute=dev_alexis
Engine name=Catalina defaultHost=localhost jvmRoute=noah_alexis

My worker.properties loadbalancer settings:

worker.list=load_balancer_test

worker.load_balancer_test.type=lb
worker.load_balancer_test.balance_workers=bl_worker_dev,bl_worker_noah
worker.load_balancer_test.sticky_session=true
worker.load_balancer_test.sticky_session_force=false

worker.bl_worker_dev.type=ajp13
worker.bl_worker_dev.host=alexis
worker.bl_worker_dev.port=9003
worker.bl_worker_dev.lbfactor=1
worker.bl_worker_dev.socket_keepalive=1
worker.bl_worker_dev.recycle_timeout=300

worker.bl_worker_noah.type=ajp13
worker.bl_worker_noah.host=alexis
worker.bl_worker_noah.port=8063
worker.bl_worker_noah.lbfactor=3
worker.bl_worker_noah.socket_keepalive=1
worker.bl_worker_noah.recycle_timeout=300

Any ideas, things I could try would be much appreciated.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]









-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Apache2...TC4.1.30...mod_jk odd behavior

[Chris Pat]

Hello
I am getting odd behavior w/TC4.1.30 and the
configurations below.  
www.vhost01.com  www.vhost01.com/hello.jsp work and
as expected
www.vhost02.com  www.vhost02.com/sb/hello.jsp work
NOT as expected.  As implied in the server.xml
snipette the tomcat serving directory is the typical
/webapps/op for vhost01  /webapps/sb for vhost02.
(Its a perverse mgt story why they are not vhost01 
vhost02).  The configs are, afaiks, identical
parameterized as needed.  www.vhost02.com/hello.jsp
should work.  Ideas?  tia


httpd.conf
VirtualHost 192.168.2.100
ServerName www.vhost01.com
ServerAdmin [EMAIL PROTECTED]
DocumentRoot D:/Projects01/vhost01/site
ErrorLog D:/Projects01/vhost01/logs/error_log
CustomLog D:/Projects01/vhost01/logs/access_log
common
JkMount /*.jsp connect_cp   
JkMount /servlet/* connect_cp


/VirtualHost

VirtualHost 192.168.2.100
ServerName www.vhost02.com
ServerAdmin [EMAIL PROTECTED]
DocumentRoot D:/Projects01/vhost02/site
ErrorLog D:/Projects01/vhost02/logs/error_log
CustomLog D:/Projects01/vhost02/logs/access_log
common
JkMount /*.jsp connect_sb
JkMount /servlet/* connect_sb

/VirtualHost

server.xml
 Host name=www.vhost01.com debug=0
unpackWARs=true
Logger
className=org.apache.catalina.logger.FileLogger
 directory=logs  prefix=op.
suffix=.txt timestamp=true/
Context path= docBase=webapps/op
debug=1 appBase=webapps/op reloadable=true/
Valve
className=org.apache.catalina.valves.AccessLogValve
 directory=logs 
prefix=virtual_log. suffix=.txt
 pattern=common/
/Host 
Host name=www.vhost02.com debug=0
unpackWARs=true
Logger
className=org.apache.catalina.logger.FileLogger
 directory=logs  prefix=sb.
suffix=.txt timestamp=true/
Context path= docBase=webapps/sb
debug=1 appBase=webapps/sb reloadable=true/
Valve
className=org.apache.catalina.valves.AccessLogValve
 directory=logs 
prefix=virtual_log. suffix=.txt
 pattern=common/
/Host 

properties
workers.tomcat_home E:\Program Files\Tomcat 4.1
workers.java_home=$JAVA_HOME
ps\
worker.list=ajp12, ajp13, connect_cp, connect_sb
worker.connect_cp.port=8009
worker.connect_cp.host=www.vhost01.com
worker.connect_cp.type=ajp13

worker.connect_sb.port=8009
worker.connect_sb.host=www.vhost02.com
worker.connect_sb.type=ajp13

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Performance proxy_ajp vs. mod_jk when TOMCAT integration with Apache

[Christine Ho]

Hi,
   Can somebody tell me what the difference between
the proxy_ajp and mod_jk is. 

thanks,
Christine

--- Mladen Turk [EMAIL PROTECTED] wrote:

 Xuekun Hu wrote:
  Hi, 
 From performance point, which connector will be
 used for TOMCAT
  intergration with Apache? proxy_ajp or mod_jk?
  
  I read some docs which said mod_jk should have
 better performance than
  proxying. While proxy_ajp in Apache2.1 is an
 addition to the mod_proxy
  and uses Tomcat's AJP protocol stack. So I ask the
 upper question.
  
 
 Right, both mod_jk and proxy_ajp have almost the
 same performance,
 and they are up to twice as fast compared with http
 mostly because
 of constant connection pool. AJP protocol gives it's
 share too
 by transferring less data across the wire.
 
 If you are using Apache 2.1+ there is no need to use
 mod_jk and
 maintain additional module.
 
 Regards,
 Mladen.
 

-
 To unsubscribe, e-mail:
 [EMAIL PROTECTED]
 For additional commands, e-mail:
 [EMAIL PROTECTED]
 
 





__ 
Do you Yahoo!? 
Yahoo! Mail - You care about security. So do we. 
http://promotions.yahoo.com/new_mail

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Performance proxy_ajp vs. mod_jk when TOMCAT integration with Apache

[Xuekun Hu]

proxy_ajp is mod_jk successor in Apache2.1/2.2 core. 
You can find more info:
http://httpd.apache.org/docs-2.1/mod/mod_proxy.html
http://httpd.apache.org/docs-2.1/mod/mod_proxy_ajp.html
http://httpd.apache.org/docs-2.1/mod/mod_proxy_balancer.html

Thx, Xuekun

On 8/17/05, Christine Ho [EMAIL PROTECTED] wrote:
 Hi,
   Can somebody tell me what the difference between
 the proxy_ajp and mod_jk is.
 
 thanks,
 Christine

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Apache + Tomcat + Mod_JK + SSL How to?

[Kiarna Boyd]

Hi,

I've been following this thread for a bit and can offer some of my 
painfully gained insights. I have Apache, tomcat 5.0.28, mod_jk and 
SSL.

This is not a real fix, just my workarounds.

It drove me nuts forever until I figured out that Apache webserver does 
not successful apply rewrite rules to the JkMount directive.


In my httpd.conf:

#tomcat worker
JkWorkersFile conf/workers.properties
JkLogFile logs/jk.log
JkLogLevel info
JkMount /*.jsp jkworker


Under my virtual host port 80 I tested a few rewrite rules(the first 
was to the 'admin' directory, the second was for all requests):


RewriteRule ^/admin/(.*)$ https://server.name.com/$1 [R]

RewriteRule ^.*$ https://server.name.com%{REQUEST_URI} [R]

The rewrite would work for non JkMount items, but the behavior seemed 
to show apache just handing off the transaction to tomcat via the mount 
BEFORE applying the rewrite.
(please check this for yourself, if you use a rewrite rule to a non 
JkMount directory Apache should redirect it successfully)


Tomcat would not bounce it to port 443 because the rewrite rule was not 
in the tomcat layer.


Our java programer ended up writing a custom jsp that redirected the 
transaction to a SSL port.

I then made the redirect directory forbidden under non-SSL.

I suspect there maybe a more graceful way to do this please let me know 
if you find it.



-Kiarna

Performance proxy_ajp vs. mod_jk when TOMCAT integration with Apache

[Xuekun Hu]

Hi, 
From performance point, which connector will be used for TOMCAT
intergration with Apache? proxy_ajp or mod_jk?

I read some docs which said mod_jk should have better performance than
proxying. While proxy_ajp in Apache2.1 is an addition to the mod_proxy
and uses Tomcat's AJP protocol stack. So I ask the upper question.

Thx, Xuekun

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Performance proxy_ajp vs. mod_jk when TOMCAT integration with Apache

[Mladen Turk]

Xuekun Hu wrote:
Hi, 

From performance point, which connector will be used for TOMCAT

intergration with Apache? proxy_ajp or mod_jk?

I read some docs which said mod_jk should have better performance than
proxying. While proxy_ajp in Apache2.1 is an addition to the mod_proxy
and uses Tomcat's AJP protocol stack. So I ask the upper question.



Right, both mod_jk and proxy_ajp have almost the same performance,
and they are up to twice as fast compared with http mostly because
of constant connection pool. AJP protocol gives it's share too
by transferring less data across the wire.

If you are using Apache 2.1+ there is no need to use mod_jk and
maintain additional module.

Regards,
Mladen.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Apache + Tomcat + Mod_JK + SSL How to?

[Stanczak Group]

I know this has been asked, but the all the emails and on-line docs 
don't seem to make sense to me. What I have is this. Apache, Tomcat, 
Mod_JK all running and working on my server. The SSL on Apache is 
working as well. All I want to do is have certain urls use SSL on 
Apache. So when you go to /site it's non-ssl, which works now, but when 
you access /admin it redirects to SSL, this is not working now. How do I 
get this working?


--
Justin Stanczak
Stanczak Group
812-735-3600

All that is necessary for the triumph of evil is that good men do nothing.
Edmund Burke

.....__.
./  _/....._/..|_.....
/...\../.__.\./\...__\/.._.\./._..\
\\_\..\..___/|...|..\..|.(.._.|._..)
.\__../\___.._\__|../__|..\/.\/..
\/.\/.\/..


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Apache + Tomcat + Mod_JK + SSL How to?

[Stanczak Group]

Well, maybe I've just make a mistake somewhere. I looked at my 
jsp-examples/ url work with ssl and without in mod_jk. Where should I 
look to see why this one works but my app doesn't?


Stanczak Group wrote:

I know this has been asked, but the all the emails and on-line docs 
don't seem to make sense to me. What I have is this. Apache, Tomcat, 
Mod_JK all running and working on my server. The SSL on Apache is 
working as well. All I want to do is have certain urls use SSL on 
Apache. So when you go to /site it's non-ssl, which works now, but 
when you access /admin it redirects to SSL, this is not working now. 
How do I get this working?




--
Justin Stanczak
Stanczak Group
812-735-3600

All that is necessary for the triumph of evil is that good men do nothing.
Edmund Burke

.....__.
./  _/....._/..|_.....
/...\../.__.\./\...__\/.._.\./._..\
\\_\..\..___/|...|..\..|.(.._.|._..)
.\__../\___.._\__|../__|..\/.\/..
\/.\/.\/..


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Apache + Tomcat + Mod_JK + SSL How to?

[Mladen Turk]

Stanczak Group wrote:
Well, maybe I've just make a mistake somewhere. I looked at my 
jsp-examples/ url work with ssl and without in mod_jk. Where should I 
look to see why this one works but my app doesn't?


Stanczak Group wrote:

I know this has been asked, but the all the emails and on-line docs 
don't seem to make sense to me. What I have is this. Apache, Tomcat, 
Mod_JK all running and working on my server. The SSL on Apache is 
working as well. All I want to do is have certain urls use SSL on 
Apache. So when you go to /site it's non-ssl, which works now, but 
when you access /admin it redirects to SSL, this is not working now. 
How do I get this working?






Hi,

Your question is a little bit unclear.
If you need a redirection from
http://site/admin/ to https://site/admin/ look at the mod_rewrite,
or simply make a absolute link to https page.

Regards,
Mladen.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Apache + Tomcat + Mod_JK + SSL How to?

[Stanczak Group]

I'm not familiar with mod_jk, but in Tomcat when using SSL I can put in 
a security constraint and it will redirect to a secure connection, so 
that's why I'm making it sound like a redirect. But the real issue is 
when I access the url for example http://www.myapp.com/thisapp it works, 
but when I add https://www.myapp.com/thisapp it fails saying The 
requested URL /MemCarQue/cars was not found on this server.. But the 
default jsp-examples/ url works with SSL and without. Once this works 
then I'll want to make it so the /thisapp/secure part works like Tomcat 
stand alone and redirects based on the security constraint in web.xml of 
the app. I'm guessing this can be done by setting the Tomcat to redirect 
to SSL port.



Mladen Turk wrote:


Stanczak Group wrote:

Well, maybe I've just make a mistake somewhere. I looked at my 
jsp-examples/ url work with ssl and without in mod_jk. Where should I 
look to see why this one works but my app doesn't?


Stanczak Group wrote:

I know this has been asked, but the all the emails and on-line docs 
don't seem to make sense to me. What I have is this. Apache, Tomcat, 
Mod_JK all running and working on my server. The SSL on Apache is 
working as well. All I want to do is have certain urls use SSL on 
Apache. So when you go to /site it's non-ssl, which works now, but 
when you access /admin it redirects to SSL, this is not working now. 
How do I get this working?






Hi,

Your question is a little bit unclear.
If you need a redirection from
http://site/admin/ to https://site/admin/ look at the mod_rewrite,
or simply make a absolute link to https page.

Regards,
Mladen.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




--
Justin Stanczak
Stanczak Group
812-735-3600

All that is necessary for the triumph of evil is that good men do nothing.
Edmund Burke

.....__.
./  _/....._/..|_.....
/...\../.__.\./\...__\/.._.\./._..\
\\_\..\..___/|...|..\..|.(.._.|._..)
.\__../\___.._\__|../__|..\/.\/..
\/.\/.\/..


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Apache + Tomcat + Mod_JK + SSL How to?

[Mladen Turk]

Stanczak Group wrote:
I'm not familiar with mod_jk, but in Tomcat when using SSL I can put in 
a security constraint and it will redirect to a secure connection, so 
that's why I'm making it sound like a redirect.


Hmm.
You are still unclear.
Seems to me that you are saying that you can access your
application with http via mod_jk but not via https,
and you can access jsp-examples both with http and https?

Is this correct?

Also, adjust your clock.


Regards,
Mladen.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Apache + Tomcat + Mod_JK + SSL How to?

[Stanczak Group]

Mladen Turk wrote:


Stanczak Group wrote:

I'm not familiar with mod_jk, but in Tomcat when using SSL I can put 
in a security constraint and it will redirect to a secure connection, 
so that's why I'm making it sound like a redirect.



Hmm.
You are still unclear.
Seems to me that you are saying that you can access your
application with http via mod_jk but not via https,
and you can access jsp-examples both with http and https?

Is this correct?


yes that is correct.



Also, adjust your clock.


? What do you mean?




Regards,
Mladen.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




--
Justin Stanczak
Stanczak Group
812-735-3600

All that is necessary for the triumph of evil is that good men do nothing.
Edmund Burke

.....__.
./  _/....._/..|_.....
/...\../.__.\./\...__\/.._.\./._..\
\\_\..\..___/|...|..\..|.(.._.|._..)
.\__../\___.._\__|../__|..\/.\/..
\/.\/.\/..


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Apache + Tomcat + Mod_JK + SSL How to?

[Stanczak Group]

test time

Stanczak Group wrote:




Mladen Turk wrote:


Stanczak Group wrote:

I'm not familiar with mod_jk, but in Tomcat when using SSL I can put 
in a security constraint and it will redirect to a secure 
connection, so that's why I'm making it sound like a redirect.




Hmm.
You are still unclear.
Seems to me that you are saying that you can access your
application with http via mod_jk but not via https,
and you can access jsp-examples both with http and https?

Is this correct?



yes that is correct.



Also, adjust your clock.



? What do you mean?




Regards,
Mladen.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






--
Justin Stanczak
Stanczak Group
812-735-3600

All that is necessary for the triumph of evil is that good men do nothing.
Edmund Burke

.....__.
./  _/....._/..|_.....
/...\../.__.\./\...__\/.._.\./._..\
\\_\..\..___/|...|..\..|.(.._.|._..)
.\__../\___.._\__|../__|..\/.\/..
\/.\/.\/..


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Apache + Tomcat + Mod_JK + SSL How to?

[Stanczak Group]

Mladen Turk wrote:


Stanczak Group wrote:

I'm not familiar with mod_jk, but in Tomcat when using SSL I can put 
in a security constraint and it will redirect to a secure connection, 
so that's why I'm making it sound like a redirect.



Hmm.
You are still unclear.
Seems to me that you are saying that you can access your
application with http via mod_jk but not via https,
and you can access jsp-examples both with http and https?

Is this correct?

Also, adjust your clock.


That fix it? I didn't even see it was off.




Regards,
Mladen.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




--
Justin Stanczak
Stanczak Group
812-735-3600

All that is necessary for the triumph of evil is that good men do nothing.
Edmund Burke

.....__.
./  _/....._/..|_.....
/...\../.__.\./\...__\/.._.\./._..\
\\_\..\..___/|...|..\..|.(.._.|._..)
.\__../\___.._\__|../__|..\/.\/..
\/.\/.\/..


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Apache + Tomcat + Mod_JK + SSL How to? Got it.

[Stanczak Group]

It was something simple. I didn't have to mod_jk directive setup on the 
virtual host with ssl.


Stanczak Group wrote:




Mladen Turk wrote:


Stanczak Group wrote:

I'm not familiar with mod_jk, but in Tomcat when using SSL I can put 
in a security constraint and it will redirect to a secure 
connection, so that's why I'm making it sound like a redirect.




Hmm.
You are still unclear.
Seems to me that you are saying that you can access your
application with http via mod_jk but not via https,
and you can access jsp-examples both with http and https?

Is this correct?

Also, adjust your clock.



That fix it? I didn't even see it was off.




Regards,
Mladen.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






--
Justin Stanczak
Stanczak Group
812-735-3600

All that is necessary for the triumph of evil is that good men do nothing.
Edmund Burke

.....__.
./  _/....._/..|_.....
/...\../.__.\./\...__\/.._.\./._..\
\\_\..\..___/|...|..\..|.(.._.|._..)
.\__../\___.._\__|../__|..\/.\/..
\/.\/.\/..


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Does Tomcat 5 support mod_JK?

[Mark Thomas]

Try reading:
http://jakarta.apache.org/tomcat/tomcat-5.5-doc/config/ajp.html for 
the Tomcat end and 
http://jakarta.apache.org/tomcat/connectors-doc/config/apache.html for 
the Apache httpd end.


Mark

g1 Sunkersett wrote:

Hi,

I am trying load balancing with Tomcat 5, fornted with Apache's mod_jk 
connector.


It is always the local one that serves my request. Cannot get my remote 
Tomcat to serve any.

http://localhost/jkstatus also gives a error page
Have workers.properties and all configured but ...

Doing a search on google found Tomcat + mod_JK documentation take me to

Tomcat 4.0.1 docs 
(http://jakarta.apache.org/tomcat/tomcat-4.1-doc/config/jk.html)
Tomcat 5 docs has almost nothing on mod_JK (The page 
http://jakarta.apache.org/tomcat/tomcat-5.0-doc/config/jk.html is NON 
existant)


Am I trying in vain.
DOES TOMCAT 5.x.xx support mod_JK or vice versa.

I am using Tomcat 5.0.28 and mod_JK binary - mod_jk-1.2.14-apache-2.0.54.so
OS: Windows XP

any clues will be appreciated.

thx
g1

_
Is your PC infected? Get a FREE online computer virus scan from McAfee® 
Security. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]







-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Does Tomcat 5 support mod_JK?

[g1 Sunkersett]

Hi,

I am trying load balancing with Tomcat 5, fornted with Apache's mod_jk 
connector.


It is always the local one that serves my request. Cannot get my remote 
Tomcat to serve any.

http://localhost/jkstatus also gives a error page
Have workers.properties and all configured but ...

Doing a search on google found Tomcat + mod_JK documentation take me to

Tomcat 4.0.1 docs 
(http://jakarta.apache.org/tomcat/tomcat-4.1-doc/config/jk.html)
Tomcat 5 docs has almost nothing on mod_JK (The page 
http://jakarta.apache.org/tomcat/tomcat-5.0-doc/config/jk.html is NON 
existant)


Am I trying in vain.
DOES TOMCAT 5.x.xx support mod_JK or vice versa.

I am using Tomcat 5.0.28 and mod_JK binary - mod_jk-1.2.14-apache-2.0.54.so
OS: Windows XP

any clues will be appreciated.

thx
g1

_
Is your PC infected? Get a FREE online computer virus scan from McAfee® 
Security. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: sessions dropping with mod_ssl, mod_jk, mod_rewrite rules

[Mark Thomas]

Seale, Deryl wrote:

Thanks for the information, Jon. I finally realized this when I examined the 
two different cookies Tomcat was setting: the first was marked secure, and the 
second was not.

I followed the threads you provided, and one of the respondents hinted that 
this behavior may change. Does Tomcat 5.5.x still enforce this rule?


This rule is still enforced and I am aware of no plans to change it.

Mark



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Strange redirects with Apache 2.0, mod_jk and Tomcat 5.5

[Sven Köhler]

Hi,

often, Firefox tellst me, that the redirect limit is execeeded when
surfing one of my pages.

So i tried wget, and look at the result:

$ LANG=C wget www.mysite.com
--05:29:04--  http://www.mysite.com/
   = `index.html.1'
Resolving www.mysite.com... 80.70.176.140
Connecting to www.mysite.com[80.70.176.140]:80... connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: http://www.mysite.com/html/index.jsp [following]
--05:29:04--  http://www.mysite.com/html/index.jsp
   = `index.jsp.29'
Connecting to www.mysite.com[80.70.176.140]:80... connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: http://www.mysite.com [following]
--05:29:04--  http://www.mysite.com/
   = `index.html.1'
Connecting to www.mysite.com[80.70.176.140]:80... connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: http://www.mysite.com [following]
--05:29:04--  http://www.mysite.com/
   = `index.html.1'
Connecting to www.mysite.com[80.70.176.140]:80... connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: http://www.mysite.com [following]
--05:29:04--  http://www.mysite.com/
   = `index.html.1'
Connecting to www.mysite.com[80.70.176.140]:80... connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: http://www.mysite.com [following]
--05:29:04--  http://www.mysite.com/
   = `index.html.1'
Connecting to www.mysite.com[80.70.176.140]:80... connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: http://www.mysite.com [following]
--05:29:04--  http://www.mysite.com/
   = `index.html.1'
Connecting to www.mysite.com[80.70.176.140]:80... connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: http://www.mysite.com/html/index.jsp [following]
--05:29:04--  http://www.mysite.com/html/index.jsp
   = `index.jsp.29'
Connecting to www.mysite.com[80.70.176.140]:80... connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: http://www.mysite.com [following]
--05:29:04--  http://www.mysite.com/
   = `index.html.1'
Connecting to www.mysite.com[80.70.176.140]:80... connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: http://www.mysite.com [following]
--05:29:04--  http://www.mysite.com/
   = `index.html.1'
Connecting to www.mysite.com[80.70.176.140]:80... connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: http://www.mysite.com [following]
--05:29:04--  http://www.mysite.com/
   = `index.html.1'
Connecting to www.mysite.com[80.70.176.140]:80... connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: http://www.mysite.com [following]
--05:29:04--  http://www.mysite.com/
   = `index.html.1'
Connecting to www.mysite.com[80.70.176.140]:80... connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: http://www.mysite.com [following]
--05:29:05--  http://www.mysite.com/
   = `index.html.1'
Connecting to www.mysite.com[80.70.176.140]:80... connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: http://www.mysite.com/html/index.jsp [following]
--05:29:05--  http://www.mysite.com/html/index.jsp
   = `index.jsp.29'
Connecting to www.mysite.com[80.70.176.140]:80... connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: http://www.mysite.com [following]
--05:29:05--  http://www.mysite.com/
   = `index.html.1'
Connecting to www.mysite.com[80.70.176.140]:80... connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: http://www.mysite.com/html/index.jsp [following]
--05:29:05--  http://www.mysite.com/html/index.jsp
   = `index.jsp.29'
Connecting to www.mysite.com[80.70.176.140]:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]

[ =
   ] 24,409--.--K/s

05:29:05 (216.70 KB/s) - `index.jsp.29' saved [24409]




That's no joke! (www.mysite.com is a replacement for the real-website).
Look at the redirects! he's even jumping to /html/index.jsp - and for
some reason, tomcat redirects back to / - and than back again to
/html/index.jsp. That absolutly makes no sense! /index.jsp contains a
simple redirect - and /html/index.jsp ist a simple pain.

I've got the impression, that Tomcat redirects the browser to request a
page again. I don't know why, but perhaps he does that while he's
compiling the page.

Does anybody think of anything that causes this?
(except for buggy /index.jsp and /html/index.jsp - which is not the
case, since they used to work with tomcat 4.1)

Thx
  Sven


signature.asc
Description: OpenPGP digital signature

Re: Strange redirects with Apache 2.0, mod_jk and Tomcat 5.5

[Sven Köhler]

 often, Firefox tellst me, that the redirect limit is execeeded when
 surfing one of my pages.
 
 So i tried wget, and look at the result:
 
 [strange result]
 
 That's no joke! (www.mysite.com is a replacement for the real-website).
 Look at the redirects! he's even jumping to /html/index.jsp - and for
 some reason, tomcat redirects back to / - and than back again to
 /html/index.jsp. That absolutly makes no sense! /index.jsp contains a
 simple redirect - and /html/index.jsp is a simple page.

Well, i recompiled apache, but didn't recompile mod_jk - well, the
result was the one i described. After recompiling mod_jk, everything is
fine again!


signature.asc
Description: OpenPGP digital signature

Re: sessions dropping with mod_ssl, mod_jk, mod_rewrite rules

[Jon Wingfield]

I'm pretty sure Tomcat doesn't allow a session to migrate from a secure 
(ssl) channel to an insecure one. It does allow the session to be 
maintained in the other direction, however.
The rationale for this behaviour is that if the login is supposed to be 
secure why allow the session cookie to be snooped on an insecure channel.


Doing a cursory search of the archives I found these threads:
http://marc.theaimsgroup.com/?l=tomcat-userm=111470187706771w=2
http://marc.theaimsgroup.com/?l=tomcat-userm=106871784707053w=2

HTH,

Jon

Seale, Deryl wrote:

Hi, there.  I have a problem whereby tomcat is getting confused with user 
sessions due to (I think) some mod_rewrite rules that switch a user in and out 
of SSL.  The general requirement I have is to only use SSL in certain parts of 
our application (login, user administration, etc), and we use mod_rewrite rules 
to enforce this. The problem is that while we can correctly make sure a user 
login is properly redirected to SSL, when that user clicks on a link following 
login (ie: a non-SSL request), they are sent back to the login page. This is 
due, I think, to tomcat confusedly thinking the subsequent request comes from a 
new, unauthenticated user, possibly because the second request is not over SSL. 
 When I run an HTTP tracer, I indeed see that there is a new session cookie 
placed for the subsequent request.

 


Below is the relevant portion of our httpd.conf file, followed by the 
workes.properties file.  I've followed the recommendations I've seen online 
regarding connector configuration, but perhaps there is something subtle that 
is missing, or our rewrite rules are screwed up.  Any insight is appreciated.

 


thanks.

-d.

 


httpd.conf (irrelevant sections omitted):

 


# Load mod_jk

#

LoadModulejk_module  libexec/mod_jk.so

 


# Configure mod_jk

#

JkWorkersFile   conf/workers.properties

JkLogFile   logs/mod_jk.log

JkLogLevel  info

JkShmFile   logs/jk.shm

JkShmSize   10M

 


# Map mod_ssl vars to JK vars so that tomcat can reference SSL info.

JkExtractSSLOn

JkOptions   +ForwardKeySize +ForwardURICompat -ForwardDirectories

JkHTTPSIndicatorHTTPS

JkSESSIONIndicator  SSL_SESSION_ID

JkCIPHERIndicator   SSL_CIPHER

JkCERTSIndicatorSSL_CLIENT_CERT

 


JkMount /tech/* tech_1

JkMount /tech tech_1

 


VirtualHost _default_:80

RewriteEngine on

RewriteLog /usr/local/apache/logs/rewrite.log

RewriteLogLevel 1

RewriteCond %{SERVER_PORT} 80

 


#redirect requests for index.html to login page

RewriteCond %{REQUEST_URI} /index.html

RewriteRule ^/(.*) https://tech-dev.classroom.com/tech/home.do

 


#redirect requests for login page

RewriteCond %{REQUEST_URI} /tech/home.do

RewriteRule ^/(.*) https://tech-dev.classroom.com/tech/home.do

 


# redirect requests for the trial page

RewriteCond %{SERVER_PORT} 80

RewriteCond %{REQUEST_URI} /tech/trial.do

RewriteRule ^/(.*) https://tech-dev.classroom.com/$1

 


# redirect requests for the profile

RewriteCond %{SERVER_PORT} 80

RewriteCond %{REQUEST_URI} /tech/.*profile.*

RewriteRule ^/(.*) https://tech-dev.classroom.com/$1

 


# redirect requests for activation

RewriteCond %{SERVER_PORT} 80

RewriteCond %{REQUEST_URI} /tech/activation.*

RewriteRule ^/(.*) https://tech-dev.classroom.com/$1

 


# redirect requests for admin

RewriteCond %{SERVER_PORT} 80

RewriteCond %{REQUEST_URI} /tech/admin/.*

RewriteRule ^/(.*) https://tech-dev.classroom.com/$1

 


# redirect requests for michigan state

RewriteCond %{SERVER_PORT} 80

RewriteCond %{REQUEST_URI} /michigan

RewriteRule ^/(.*) https://tech-dev.classroom.com/tech/home.do

 


# redirect requests for CSR Tool

RewriteCond %{SERVER_PORT} 80

RewriteCond %{REQUEST_URI} /subscription*

RewriteRule ^/(.*) http://SERVER_CSR/subscription

 


RewriteCond %{SERVER_PORT} 80

RewriteCond %{REQUEST_URI} /studentwork/.*

RewriteRule ^/(.*) http://forumtecprd.classroom.com/$1

/VirtualHost

 

 


##

## SSL Settings ##

##

 


IfDefine SSL

Listen 443

/IfDefine

 


##

##  SSL Global Context

##

##  All SSL configuration in this context applies both to

##  the main server and all SSL-enabled virtual hosts.

##

 


#

#   Some MIME-types for downloading Certificates and CRLs

#

IfDefine SSL

AddType application/x-x509-ca-cert .crt

AddType application/x-pkcs7-crl.crl

/IfDefine

 


IfModule mod_ssl.c

#   Pass Phrase Dialog:

#   Configure the pass phrase gathering process.

#   The filtering dialog program (`builtin' is a internal

#   terminal dialog) has to provide the pass phrase on stdout.

SSLPassPhraseDialog  builtin

 


#   Inter-Process Session Cache:

#   Configure the SSL Session Cache: First the mechanism

#   to use and second the expiring timeout

RE: sessions dropping with mod_ssl, mod_jk, mod_rewrite rules

[Seale, Deryl]

Thanks for the information, Jon. I finally realized this when I examined the 
two different cookies Tomcat was setting: the first was marked secure, and the 
second was not.

I followed the threads you provided, and one of the respondents hinted that 
this behavior may change. Does Tomcat 5.5.x still enforce this rule?

thanks.
-d.

-Original Message-
From: Jon Wingfield [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, August 09, 2005 5:23 AM
To: Tomcat Users List
Subject: Re: sessions dropping with mod_ssl, mod_jk, mod_rewrite rules

I'm pretty sure Tomcat doesn't allow a session to migrate from a secure 
(ssl) channel to an insecure one. It does allow the session to be 
maintained in the other direction, however.
The rationale for this behaviour is that if the login is supposed to be 
secure why allow the session cookie to be snooped on an insecure channel.

Doing a cursory search of the archives I found these threads:
http://marc.theaimsgroup.com/?l=tomcat-userm=111470187706771w=2
http://marc.theaimsgroup.com/?l=tomcat-userm=106871784707053w=2

HTH,

Jon




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

sessions dropping with mod_ssl, mod_jk, mod_rewrite rules

[Seale, Deryl]

Hi, there.  I have a problem whereby tomcat is getting confused with user 
sessions due to (I think) some mod_rewrite rules that switch a user in and out 
of SSL.  The general requirement I have is to only use SSL in certain parts of 
our application (login, user administration, etc), and we use mod_rewrite rules 
to enforce this. The problem is that while we can correctly make sure a user 
login is properly redirected to SSL, when that user clicks on a link following 
login (ie: a non-SSL request), they are sent back to the login page. This is 
due, I think, to tomcat confusedly thinking the subsequent request comes from a 
new, unauthenticated user, possibly because the second request is not over SSL. 
 When I run an HTTP tracer, I indeed see that there is a new session cookie 
placed for the subsequent request.

 

Below is the relevant portion of our httpd.conf file, followed by the 
workes.properties file.  I've followed the recommendations I've seen online 
regarding connector configuration, but perhaps there is something subtle that 
is missing, or our rewrite rules are screwed up.  Any insight is appreciated.

 

thanks.

-d.

 

httpd.conf (irrelevant sections omitted):

 

# Load mod_jk

#

LoadModulejk_module  libexec/mod_jk.so

 

# Configure mod_jk

#

JkWorkersFile   conf/workers.properties

JkLogFile   logs/mod_jk.log

JkLogLevel  info

JkShmFile   logs/jk.shm

JkShmSize   10M

 

# Map mod_ssl vars to JK vars so that tomcat can reference SSL info.

JkExtractSSLOn

JkOptions   +ForwardKeySize +ForwardURICompat -ForwardDirectories

JkHTTPSIndicatorHTTPS

JkSESSIONIndicator  SSL_SESSION_ID

JkCIPHERIndicator   SSL_CIPHER

JkCERTSIndicatorSSL_CLIENT_CERT

 

JkMount /tech/* tech_1

JkMount /tech tech_1

 

VirtualHost _default_:80

RewriteEngine on

RewriteLog /usr/local/apache/logs/rewrite.log

RewriteLogLevel 1

RewriteCond %{SERVER_PORT} 80

 

#redirect requests for index.html to login page

RewriteCond %{REQUEST_URI} /index.html

RewriteRule ^/(.*) https://tech-dev.classroom.com/tech/home.do

 

#redirect requests for login page

RewriteCond %{REQUEST_URI} /tech/home.do

RewriteRule ^/(.*) https://tech-dev.classroom.com/tech/home.do

 

# redirect requests for the trial page

RewriteCond %{SERVER_PORT} 80

RewriteCond %{REQUEST_URI} /tech/trial.do

RewriteRule ^/(.*) https://tech-dev.classroom.com/$1

 

# redirect requests for the profile

RewriteCond %{SERVER_PORT} 80

RewriteCond %{REQUEST_URI} /tech/.*profile.*

RewriteRule ^/(.*) https://tech-dev.classroom.com/$1

 

# redirect requests for activation

RewriteCond %{SERVER_PORT} 80

RewriteCond %{REQUEST_URI} /tech/activation.*

RewriteRule ^/(.*) https://tech-dev.classroom.com/$1

 

# redirect requests for admin

RewriteCond %{SERVER_PORT} 80

RewriteCond %{REQUEST_URI} /tech/admin/.*

RewriteRule ^/(.*) https://tech-dev.classroom.com/$1

 

# redirect requests for michigan state

RewriteCond %{SERVER_PORT} 80

RewriteCond %{REQUEST_URI} /michigan

RewriteRule ^/(.*) https://tech-dev.classroom.com/tech/home.do

 

# redirect requests for CSR Tool

RewriteCond %{SERVER_PORT} 80

RewriteCond %{REQUEST_URI} /subscription*

RewriteRule ^/(.*) http://SERVER_CSR/subscription

 

RewriteCond %{SERVER_PORT} 80

RewriteCond %{REQUEST_URI} /studentwork/.*

RewriteRule ^/(.*) http://forumtecprd.classroom.com/$1

/VirtualHost

 

 

##

## SSL Settings ##

##

 

IfDefine SSL

Listen 443

/IfDefine

 

##

##  SSL Global Context

##

##  All SSL configuration in this context applies both to

##  the main server and all SSL-enabled virtual hosts.

##

 

#

#   Some MIME-types for downloading Certificates and CRLs

#

IfDefine SSL

AddType application/x-x509-ca-cert .crt

AddType application/x-pkcs7-crl.crl

/IfDefine

 

IfModule mod_ssl.c

#   Pass Phrase Dialog:

#   Configure the pass phrase gathering process.

#   The filtering dialog program (`builtin' is a internal

#   terminal dialog) has to provide the pass phrase on stdout.

SSLPassPhraseDialog  builtin

 

#   Inter-Process Session Cache:

#   Configure the SSL Session Cache: First the mechanism

#   to use and second the expiring timeout (in seconds).

SSLSessionCache dbm:/usr/local/apache/logs/ssl_scache

SSLSessionCacheTimeout  300

 

#   Semaphore:

#   Configure the path to the mutual exclusion semaphore the

#   SSL engine uses internally for inter-process synchronization.

SSLMutex  file:/usr/local/apache/logs/ssl_mutex

 

#   Pseudo Random Number Generator (PRNG):

#   Configure one or more sources to seed the PRNG of the

#   SSL library. The seed data should be of good random quality.

#   WARNING! On some platforms /dev/random blocks if not enough entropy

RE: sessions dropping with mod_ssl, mod_jk, mod_rewrite rules

[Seale, Deryl]

Forgot to add, we're using Tomcat 5.0.28, mod_jk 1.2.14, and apache 1.3.33.

thanks.
-d.


-Original Message-
From: Seale, Deryl 
Sent: Monday, August 08, 2005 11:48 AM
To: tomcat-user@jakarta.apache.org
Subject: sessions dropping with mod_ssl, mod_jk, mod_rewrite rules

Hi, there.  I have a problem whereby tomcat is getting confused with user 
sessions due to (I think) some mod_rewrite rules that switch a user in and out 
of SSL.  The general requirement I have is to only use SSL in certain parts of 
our application (login, user administration, etc), and we use mod_rewrite rules 
to enforce this. The problem is that while we can correctly make sure a user 
login is properly redirected to SSL, when that user clicks on a link following 
login (ie: a non-SSL request), they are sent back to the login page. This is 
due, I think, to tomcat confusedly thinking the subsequent request comes from a 
new, unauthenticated user, possibly because the second request is not over SSL. 
 When I run an HTTP tracer, I indeed see that there is a new session cookie 
placed for the subsequent request.

 

Below is the relevant portion of our httpd.conf file, followed by the 
workes.properties file.  I've followed the recommendations I've seen online 
regarding connector configuration, but perhaps there is something subtle that 
is missing, or our rewrite rules are screwed up.  Any insight is appreciated.

 

thanks.

-d.

 

httpd.conf (irrelevant sections omitted):

 

# Load mod_jk

#

LoadModulejk_module  libexec/mod_jk.so

 

# Configure mod_jk

#

JkWorkersFile   conf/workers.properties

JkLogFile   logs/mod_jk.log

JkLogLevel  info

JkShmFile   logs/jk.shm

JkShmSize   10M

 

# Map mod_ssl vars to JK vars so that tomcat can reference SSL info.

JkExtractSSLOn

JkOptions   +ForwardKeySize +ForwardURICompat -ForwardDirectories

JkHTTPSIndicatorHTTPS

JkSESSIONIndicator  SSL_SESSION_ID

JkCIPHERIndicator   SSL_CIPHER

JkCERTSIndicatorSSL_CLIENT_CERT

 

JkMount /tech/* tech_1

JkMount /tech tech_1

 

VirtualHost _default_:80

RewriteEngine on

RewriteLog /usr/local/apache/logs/rewrite.log

RewriteLogLevel 1

RewriteCond %{SERVER_PORT} 80

 

#redirect requests for index.html to login page

RewriteCond %{REQUEST_URI} /index.html

RewriteRule ^/(.*) https://tech-dev.classroom.com/tech/home.do

 

#redirect requests for login page

RewriteCond %{REQUEST_URI} /tech/home.do

RewriteRule ^/(.*) https://tech-dev.classroom.com/tech/home.do

 

# redirect requests for the trial page

RewriteCond %{SERVER_PORT} 80

RewriteCond %{REQUEST_URI} /tech/trial.do

RewriteRule ^/(.*) https://tech-dev.classroom.com/$1

 

# redirect requests for the profile

RewriteCond %{SERVER_PORT} 80

RewriteCond %{REQUEST_URI} /tech/.*profile.*

RewriteRule ^/(.*) https://tech-dev.classroom.com/$1

 

# redirect requests for activation

RewriteCond %{SERVER_PORT} 80

RewriteCond %{REQUEST_URI} /tech/activation.*

RewriteRule ^/(.*) https://tech-dev.classroom.com/$1

 

# redirect requests for admin

RewriteCond %{SERVER_PORT} 80

RewriteCond %{REQUEST_URI} /tech/admin/.*

RewriteRule ^/(.*) https://tech-dev.classroom.com/$1

 

# redirect requests for michigan state

RewriteCond %{SERVER_PORT} 80

RewriteCond %{REQUEST_URI} /michigan

RewriteRule ^/(.*) https://tech-dev.classroom.com/tech/home.do

 

# redirect requests for CSR Tool

RewriteCond %{SERVER_PORT} 80

RewriteCond %{REQUEST_URI} /subscription*

RewriteRule ^/(.*) http://SERVER_CSR/subscription

 

RewriteCond %{SERVER_PORT} 80

RewriteCond %{REQUEST_URI} /studentwork/.*

RewriteRule ^/(.*) http://forumtecprd.classroom.com/$1

/VirtualHost

 

 

##

## SSL Settings ##

##

 

IfDefine SSL

Listen 443

/IfDefine

 

##

##  SSL Global Context

##

##  All SSL configuration in this context applies both to

##  the main server and all SSL-enabled virtual hosts.

##

 

#

#   Some MIME-types for downloading Certificates and CRLs

#

IfDefine SSL

AddType application/x-x509-ca-cert .crt

AddType application/x-pkcs7-crl.crl

/IfDefine

 

IfModule mod_ssl.c

#   Pass Phrase Dialog:

#   Configure the pass phrase gathering process.

#   The filtering dialog program (`builtin' is a internal

#   terminal dialog) has to provide the pass phrase on stdout.

SSLPassPhraseDialog  builtin

 

#   Inter-Process Session Cache:

#   Configure the SSL Session Cache: First the mechanism

#   to use and second the expiring timeout (in seconds).

SSLSessionCache dbm:/usr/local/apache/logs/ssl_scache

SSLSessionCacheTimeout  300

 

#   Semaphore:

#   Configure the path to the mutual exclusion semaphore the

#   SSL engine uses internally for inter-process synchronization.

SSLMutex  file:/usr/local

frames and mod_jk on Windows

[Frédéric Viollet]

Hi all,

Is anyone aware of a problem with using frames and mod_jk on windows?
I'm using Apache 1.3.33 - mod_jk 1.2.14 and I've got the folowing problem:
I'm trying to access an HTML page with frames in it. Only the first 
frame is correctly displayed;

the other says Internal Server Error
My HTML page is called toto.html, the first frame is bonjour.jsp and the 
second is bonjour2.jsp (the two jsps are identical)

If anyone could tell me if I'm doing something wrong :(
Thanks...

On the apache side (in the mod_jk.log file) I get the following traces:
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c 
(449): Attempting to map URI '/myapp/toto.html' from 8 maps
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c 
(461): Attempting to map context URI '/jonasAdmin/*'
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c 
(461): Attempting to map context URI '/jiapAdmin/*'
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c 
(461): Attempting to map context URI '/jonasAdmin'
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c 
(461): Attempting to map context URI '/jiapAdmin'
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c 
(461): Attempting to map context URI '/myapp/*'
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c 
(475): Found a wildchar match bonita_worker - /myapp/*
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_worker.c (111): found 
a worker bonita_worker
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_worker.c (301): 
Maintaining worker bonita_worker
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] mod_jk.c (488): Service 
protocol=HTTP/1.1 method=GET host=(null) addrr=129.185.75.10 
name=biguine.frcl.bull.fr port=8000 auth=(null) user=(null) 
laddr=129.182.22.21 raddr=129.185.75.10
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (2131): 
acquired connection cache slot=0
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (566): 
ajp marshaling done
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (1670): 
processing with 3 retries
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (909): 
sending to ajp13 pos=4 len=273 max=8192

.
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (1261): 
request body to send 0 - request body to resend 0
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (1037): 
received from ajp13 pos=0 len=139 max=8192

.
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (621): 
status = 200
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (628): 
Number of headers is = 4
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (684): 
Header[0] [ETag] = [W/546-1123233762561]
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (684): 
Header[1] [Last-Modified] = [Fri, 05 Aug 2005 09:22:42 GMT]
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (684): 
Header[2] [Content-Type] = [text/html]
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (684): 
Header[3] [Content-Length] = [546]
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (1037): 
received from ajp13 pos=0 len=550 max=8192

.
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (1037): 
received from ajp13 pos=0 len=2 max=8192

...
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (2074): 
recycling connection cache slot=0 for worker bonita_worker
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] mod_jk.c (1828): Service 
finished with status=200 for worker=bonita_worker
[Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c 
(449): Attempting to map URI '/myapp/bonjour.jsp' from 8 maps
[Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c 
(461): Attempting to map context URI '/jonasAdmin/*'
[Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c 
(461): Attempting to map context URI '/jiapAdmin/*'
[Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c 
(461): Attempting to map context URI '/jonasAdmin'
[Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c 
(461): Attempting to map context URI '/jiapAdmin'
[Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c 
(461): Attempting to map context URI '/myapp/*'
[Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c 
(475): Found a wildchar match bonita_worker - /myapp/*
[Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_worker.c (111): found 
a worker bonita_worker
[Fri Aug 05 11:24:22 2005] [5172:2684] [debug] mod_jk.c (488): Service 
protocol=HTTP/1.1 method=GET host=(null) addrr=129.185.75.10 
name=biguine.frcl.bull.fr port=8000 auth=(null) user=(null) 
laddr=129.182.22.21 raddr=129.185.75.10
[Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_ajp_common.c (2131): 
acquired connection cache slot=0
[Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_ajp_common.c (566): 
ajp marshaling

Re: frames and mod_jk on Windows

[Frédéric Viollet]

Frédéric Viollet a écrit :


Hi all,

Is anyone aware of a problem with using frames and mod_jk on windows?
I'm using Apache 1.3.33 - mod_jk 1.2.14 and I've got the folowing 
problem:
I'm trying to access an HTML page with frames in it. Only the first 
frame is correctly displayed;

the other says Internal Server Error
My HTML page is called toto.html, the first frame is bonjour.jsp and 
the second is bonjour2.jsp (the two jsps are identical)

If anyone could tell me if I'm doing something wrong :(
Thanks...

On the apache side (in the mod_jk.log file) I get the following traces:
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c 
(449): Attempting to map URI '/myapp/toto.html' from 8 maps
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c 
(461): Attempting to map context URI '/jonasAdmin/*'
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c 
(461): Attempting to map context URI '/jiapAdmin/*'
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c 
(461): Attempting to map context URI '/jonasAdmin'
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c 
(461): Attempting to map context URI '/jiapAdmin'
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c 
(461): Attempting to map context URI '/myapp/*'
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c 
(475): Found a wildchar match bonita_worker - /myapp/*
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_worker.c (111): 
found a worker bonita_worker
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_worker.c (301): 
Maintaining worker bonita_worker
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] mod_jk.c (488): Service 
protocol=HTTP/1.1 method=GET host=(null) addrr=129.185.75.10 
name=biguine.frcl.bull.fr port=8000 auth=(null) user=(null) 
laddr=129.182.22.21 raddr=129.185.75.10
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (2131): 
acquired connection cache slot=0
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (566): 
ajp marshaling done
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (1670): 
processing with 3 retries
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (909): 
sending to ajp13 pos=4 len=273 max=8192

.
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (1261): 
request body to send 0 - request body to resend 0
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (1037): 
received from ajp13 pos=0 len=139 max=8192

.
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (621): 
status = 200
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (628): 
Number of headers is = 4
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (684): 
Header[0] [ETag] = [W/546-1123233762561]
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (684): 
Header[1] [Last-Modified] = [Fri, 05 Aug 2005 09:22:42 GMT]
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (684): 
Header[2] [Content-Type] = [text/html]
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (684): 
Header[3] [Content-Length] = [546]
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (1037): 
received from ajp13 pos=0 len=550 max=8192

.
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (1037): 
received from ajp13 pos=0 len=2 max=8192

...
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (2074): 
recycling connection cache slot=0 for worker bonita_worker
[Fri Aug 05 11:24:22 2005] [5172:5584] [debug] mod_jk.c (1828): 
Service finished with status=200 for worker=bonita_worker
[Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c 
(449): Attempting to map URI '/myapp/bonjour.jsp' from 8 maps
[Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c 
(461): Attempting to map context URI '/jonasAdmin/*'
[Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c 
(461): Attempting to map context URI '/jiapAdmin/*'
[Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c 
(461): Attempting to map context URI '/jonasAdmin'
[Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c 
(461): Attempting to map context URI '/jiapAdmin'
[Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c 
(461): Attempting to map context URI '/myapp/*'
[Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c 
(475): Found a wildchar match bonita_worker - /myapp/*
[Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_worker.c (111): 
found a worker bonita_worker
[Fri Aug 05 11:24:22 2005] [5172:2684] [debug] mod_jk.c (488): Service 
protocol=HTTP/1.1 method=GET host=(null) addrr=129.185.75.10 
name=biguine.frcl.bull.fr port=8000 auth=(null) user=(null) 
laddr=129.182.22.21 raddr=129.185.75.10
[Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_ajp_common.c (2131): 
acquired connection cache slot=0
[Fri Aug 05 11:24:22 2005] [5172:2684] [debug

mod_jk or jk2??

[Luis Torres]

Hello everyone,

I see lots of posts saying that they are using or implementing jk2? For 
what I understand, that has been replaced by mod_jk... so which one is 
better or what is recommended??


I also have found better documentation related to jk2 so that adds to 
the puzzle.


Regards,

Luis

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: mod_jk or jk2??

[MC Moisei]

I thought the jk2 is newer... but I can be wrong...

MC



From: Luis Torres [EMAIL PROTECTED]
Reply-To: Tomcat Users List tomcat-user@jakarta.apache.org
To: Tomcat Users List tomcat-user@jakarta.apache.org
Subject: mod_jk or jk2??
Date: Wed, 03 Aug 2005 13:47:42 -0500

Hello everyone,

I see lots of posts saying that they are using or implementing jk2? For 
what I understand, that has been replaced by mod_jk... so which one is 
better or what is recommended??


I also have found better documentation related to jk2 so that adds to the 
puzzle.


Regards,

Luis

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: mod_jk or jk2??

[Ben Ricker]

You want to use mod_jk. JK2 has been deprecated and is no longer in
active development.

On 8/3/05, MC Moisei [EMAIL PROTECTED] wrote:
 I thought the jk2 is newer... but I can be wrong...
 
 MC
 
 
 From: Luis Torres [EMAIL PROTECTED]
 Reply-To: Tomcat Users List tomcat-user@jakarta.apache.org
 To: Tomcat Users List tomcat-user@jakarta.apache.org
 Subject: mod_jk or jk2??
 Date: Wed, 03 Aug 2005 13:47:42 -0500
 
 Hello everyone,
 
 I see lots of posts saying that they are using or implementing jk2? For
 what I understand, that has been replaced by mod_jk... so which one is
 better or what is recommended??
 
 I also have found better documentation related to jk2 so that adds to the
 puzzle.
 
 Regards,
 
 Luis
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 
 
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 


-- 
Ben Ricker
He's just this guy, you know?

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: mod_jk not detecting loss of a load balanced machine

[Edmon Begoli]

Hi,

Is this issue described below familiar to anyone who is really 
knowledgable of how mod_jk works?


Thank you,
Edmon

Edmon Begoli wrote:

We've noticed with two versions of mod_jk we've been using (1.2.5 and 
one older) that if one of the machines
hosting load balanced tomcat gets completely off the network (power 
loss) mod_jk will seem not to emove that one from the load balanced 
instances,
so the whole site will appear down because mod_jk will I guess try to 
hit it. I can not say for sure that it is the reason behind the scenes,
but I can say for sure that these versions of mod_jk do not respond 
well to machine losses - which is a pretty possible scenario.


My question is - has this been addressed in some of the later 
releases, and if not is there a workaround?





  


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Building statically mod_jk in Apache in Windows environment

[Frédéric Viollet]

Hi everybody,

I'm using mod_jk - 1.2.14.1 and apache - 1.3.19
I would like to link statically mod_jk in Apache in Windows environment.
Has anyone already managed this?

The configure --with-apache command works fine for Solaris and AIX; and 
it compiles and links alright...but I don't know what to use to 
integrate the mod_jk feature in Apache for Windows...


Thanks for your help...

Fred

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Building statically mod_jk in Apache in Windows environment

[Mladen Turk]

Frédéric Viollet wrote:

Hi everybody,

I'm using mod_jk - 1.2.14.1 and apache - 1.3.19
I would like to link statically mod_jk in Apache in Windows environment.
Has anyone already managed this?

The configure --with-apache command works fine for Solaris and AIX; and 
it compiles and links alright...but I don't know what to use to 
integrate the mod_jk feature in Apache for Windows...




Not sure what features will you have with static build that can not
be accomplished with dynamic one.
You should first consider to use the 1.3.33 version of the apache.
Although the Apache 2 version is much more stable then any 1.3 version
on windows platform, so perhaps you should consider using that.

In general you will need to create a mod_jk .lib project and link
the ApacheCore.dll with that library, also adding the module
reference to the src/os/win32/modules.c

Regards,
Mladen.




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]