RE: Mod_jk + Apache on RHEL3 gives 503 for jsp only
Here's a quick writeup. This is going to be a long reply, and I hope it will be useful. I am using Fedora Core 4 as a model. I hope it will be close enough to RHEL 3 to be useful. You may have to change paths in order to correspond to your environment. First of all, my environment: Hardware/OS === Dell 8200 with 768 MB memory Dual boot: Fedora Core 4 2.6.13-1.1526_FC4 Windows 2000 Professional Software Java 1.5.0_4 from Sun Apache 2.0.54 from RPM Tomcat 5.5.9 from jakarta.apache.org mod_jk 1.2.14.1 from source Installation Java 1.5.0_4 is installed in /usr/jdk1.5.0_04 and soft linked to /usr/java JAVA_HOME is set in /etc/profile $JAVA_HOME/bin is placed in $PATH before /usr/bin I've left the Apache RPM install alone, which means the following: DocumentRoot /var/www Logs /etc/logs soft linked to /var/log/httpd modules /etc/modules soft linked to /usr/lib/httpd/modules conf /etc/conf /etc/conf.d I've created a tomcat user with the same group membership as apache user. The home directory is /home/tomcat. /home/tomcat/jakarta-tomcat-5.5.9 Current Tomcat installation Configuration = workers.properties -- I've placed workers.properties in /etc/httpd/conf # # basic worker list # worker.list=local,status # # one to serve the applications # worker.local.type=ajp13 worker.local.host=localhost worker.local.port=8009 # # one to check the status # worker.status.type=status worker.status.host=localhost worker.status.port=8009 This is all you really need in order to connect a local Apache to a local Tomcat. I cannot think of a good reason to define more workers. That isn't to say that there aren't any. server.xml -- If you put multiple workers going to the same host and different ports, then you will have to modify server.xml. Basically, you will have to add a connector statement for each unique port that you use in your workers.properties file. You have two different ports, so you will need two connector statements. jk.conf --- I'm following the examples used by Fedora Core 4 in configuring other add-on modules for Apache. You can place the mod_jk configuration information directly in /etc/httpd/conf/httpd.conf, but I've chosen to create a separate file in /etc/httpd/conf.d The contents of my file are as follows: # # following Fedora's add-on philosophy # LoadModulejk_module modules/mod_jk.so JkWorkersFile /etc/httpd/conf/workers.properties JkLogFile logs/mod_jk.log JkLogLevelwarn JkLogStampFormat "[%a %b %d %H:%M:%S %Y] " JkShmFile logs/shm-file # # jk status # JkMount /jk-status/ status httpd.conf -- Static File Problem --- This is where the configuration can become a little more complex. It helps to understand how Apache finds files to serve. Each host in Apache has a DocumentRoot. In Redhat Fedora, the line that defines that reads: DocumentRoot "/var/www/html" That means that when you enter the following URL: http://localhost/application/ Apache will look for the DirectoryIndex files (usually index.html) in: /var/www/html/application/ This is fine until you add an application server into the mix. Many people package up the entire application into one war file. This means that all static as well as dynamic content gets loaded into the application server area. In your case, that's /usr/local/tomcat/jakarta-tomcat-5.5.9/webapps Apache will know absolutely nothing about this directory, and any files that are not mapped by JkMount and served by Tomcat will not be found by Apache Static File Solutions - 1. Change DocumentRoot The most global change is to change DocumentRoot. In order for this to work, all files in /usr/local/tomcat/jakarta-tomcat-5.5.9/webapps must be readable by the user that runs Apache (typically apache in a Redhat distribution). The way to do this is to put the following as your DocumentRoot statement. DocumentRoot "/usr/local/tomcat/jakarta-tomcat/webapps" While this works, it means that you will have to place all web sites in this location, even if they do not have dynamic content. In general, I don't like this solution. 2. Add Directory and Alias Statements Traditionally locating static files in a dynamic web site has been done by using a combination of Directory and Alias directives. The Directory directive grants appropriate server permissions (who gets to see the files, etc.) and the Alias directive matches a directory with a base URL. For example, here's one way to map application1 living in /usr/local/tomcat/jakarta-tomcat/5.5.9/webapps/application1. # # This goes in httpd.conf # Options Indexes FollowSymlinks MultiViews AllowOverride None Order allow,deny Allow from all Alias /application1/ "/usr/local/tomcat/webapps/appli
RE: Mod_jk + Apache on RHEL3 gives 503 for jsp only
To answer some questions below: Perfectly means it is our production tomcat server. It performs all the functions required and is accessed from the legacy webserver. Getting images from the path http://webserver/PI/image.png. We have no direct access linked to tomcat instances on the their ports. The Tomcat and Webserver will be on the same server. JkShmFile seems to be for unix installs where this resides on RedHat Linux EL3. I can add it if it is required for linux. Jkmount directives are not "new" but from a 4.1.24 Tomcat and Jk_mod that was upgraded. I will make the changes to be consistent with the deployed version of Tomcat. I have 4 workers setup. 1 points to a running 4.1.24 tomcat supporting an application to be replaced soon I hope. 1 to a separate port on the 4.12.24 tomcat server for one specific application because I was asked to set it up that way. 1 to the current production tomcat server. And one that is for testing and uses the same settings as the production but I can edit and change as I need to make things work. I am a bit frustrated as I have not done much to make things "break." I copied the config files and edited the httpd.conf to be consistent with the legacy install. This is the only part that does not work. "If Apache's DocumentRoot does not correspond to Tomcat's appBase, then any static files contained in the application will not be served by Apache without some more Apache configuration changes." Can you give me an example of this? -Original Message- From: Mark Eggers [mailto:[EMAIL PROTECTED] Sent: Thursday, October 06, 2005 10:54 PM To: Tomcat Users List Subject: Re: Mod_jk + Apache on RHEL3 gives 503 for jsp only --- "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote: > I have jakarta-tomcat-5.5.9 installed and working > properly on the new > server. It is perfectly accessible from the legacy > web server. By perfectly accessible you mean . . . ? > The main page, home.jsp, loads fine in the servlet > if no page is given. > http://webserver/PI/ The home.jsp spawns a 503 if > is in the URL. > http://webserver/PI/home.jsp I can successfully > get images from the > page from the tomcat instance. It does not like the > .jsp extension. By successfully getting images, do you mean: http://webserver/PI/image.png or http://tomcatserver:8080/PI/image.png > I have watched in Ethereal as no traffic goes from > the apache to the > tomcat. > I have tried using the loopback and local network > address. Why? Is this Tomcat instance on the same server? > > #INSERT OF TOMCAT CONF PARAMETERS > # Load mod_jk module > # LoadModule jk_module modules/mod_jk.so > LoadModule jk_module /etc/httpd/modules/mod_jk.so > > # Declare the module for > #AddModule mod_jk.c > > # Where to find workers.properties > JkWorkersFile /etc/httpd/conf/workers.properties > > # Where to put jk logs > JkLogFile /var/log/httpd/mod_jk.log > > # Set the jk log level [debug/error/info] > JkLogLevel debug > > # Select the log format > JkLogStampFormat "[%a %b %d %H:%M:%S %Y] " > > # JkOptions indicate to send SSL KEY SIZE, > JkOptions +ForwardKeySize +ForwardURICompat > -ForwardDirectories > > # JkRequestLogFormat set the request format > JkRequestLogFormat "%w %V %T" > I don't see the specification for JkShmFile > # Send servlet for context /examples to worker named > worker1 > JkMount /examples/servlet/* worker1 The above should be: JkMount /servlets-examples/servlet/* worker1 > JkMount /PI/* worker3 > #JkMount /PI/*.jsp worker3 Why are you using worker3 here? > # Send JSPs for context /examples to worker named > worker1 > JkMount /examples/*.jsp worker1 The above shoould be /jsp-examples/*.jsp worker1 > JkMount /journals/*.jsp worker1 > > Worker Properties > /etc/httpd/conf/workers.properties > # Define some properties > workers.apache_log=/var/log/httpd/ > workers.tomcat_home=/usr/local/tomcat/jakarta-tomcat-5.5.9 > workers.java_home=/usr/bin/java > ps=/ > > # > worker.list=worker1 > According to the documentation this should contain a comma separated list of all the workers. However, if you're going to the same Tomcat instance all the time, you'll only need one worker definition > # Set properties for worker1 (ajp13) > worker.worker1.type=ajp13 > worker.worker1.host=172.20.1.19 > worker.worker1.port=8009 > First of all, there should only be one worker list. Second of all, why do you have multiple workers going to the same host but different ports? Do you have multiple Tomcats running on this host? > # > worker.list=worker2 > > # Set properties for worker2 (ajp13) > worker.worker2.type=ajp13 > worker.worker2.host=172.20.1.19 > worker.worker2
Re: apache --> tomcat (mod_jk) works on localhost but not other hosts
Thanks for the tip Lyndon. It took a few tries, but I finally got it right, I think! __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Re: apache --> tomcat (mod_jk) works on localhost but not other hosts
--- Lyndon Tiu <[EMAIL PROTECTED]> wrote: > On Mon, 10 Oct 2005 09:01:04 -0700 (PDT) > tomcat-user@jakarta.apache.org wrote: > > I'm very new to tomcat and apache. I've set up > apache > > to forward to tomcat using mod_jk. It works fine > on > > the localhost, but if I try to connect through to > > tomcat from any other host I get 404 file not > found, > > > Please send us your workers.properties and > httpd.conf. attached, tia, scott __ Yahoo! Music Unlimited Access over 1 million songs. Try it free. http://music.yahoo.com/unlimited/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: apache --> tomcat (mod_jk) works on localhost but not other hosts
On Mon, 10 Oct 2005 09:01:04 -0700 (PDT) tomcat-user@jakarta.apache.org wrote: > I'm very new to tomcat and apache. I've set up apache > to forward to tomcat using mod_jk. It works fine on > the localhost, but if I try to connect through to > tomcat from any other host I get 404 file not found, Please send us your workers.properties and httpd.conf. -- Lyndon Tiu - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
apache --> tomcat (mod_jk) works on localhost but not other hosts
I'm very new to tomcat and apache. I've set up apache to forward to tomcat using mod_jk. It works fine on the localhost, but if I try to connect through to tomcat from any other host I get 404 file not found, although I can connect to apache. As follows: These work on localhost: http://localhost <--apache http://localhost/servlets-examples <--tomcat (So do these of course: http://localhost:8080/ <--tomcat http://localhost:8080/servlets-examples <--tomcat) And this is what happens on another host: http://hostname <--apache http://hostname/servlets-examples <--404 file not found http://hostname:8080/servlets-examples <--tomcat OS = RHEL 4 Apache 2.0.52-19.ent (Red Hat RPM) Tomcat 5.5.9-1jpp_5rh (Red Hat RPM) mod_jk-ap20-1.2.6-3jpp_7rh (Red Hat RPM) (Red Hat apparently doesn't offer a mod_jk2) It was setup according to "Pro Jakarta Tomcat 5" (Moodie, 2005), although I'm sure it's not the book's fault. Basically I modified server.xml to autogen mod_jk.conf and added listener to , modified workers.properties, and httpd.conf. I have a feeling this is something simple, and I have tried to find an answer with no luck. If anyone has any suggestions I would be greatly appreciative. Scott __ Start your day with Yahoo! - Make it your home page! http://www.yahoo.com/r/hs - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
mod_jk + context don't work ?
i configured several html virtual hosts sites with jsps ; (apache 2.0 + mod_jk.+ tomcat 5.5.) - virtual hosting managed by apache (name based virtual host) - connector ajp13 for all jsps - if a i create in server.xml : an host www.aaa.com + context infos --> everythink works but it's no longer good - if i put the site under localhost (i.e adding anything to default server.xml) and the context in a $CATALINA_HOME/conf/Catalina/localhost/ file , then : 1: under the tomcat manager (pure tomcat space) --> it works 2: if managed by apache --> the jsp cannot be reached. it seems that the jsp managing passed by apache to tomcat have the bad context. thanks in advance; gianni here is the configuration that DON'T work: -- HTTPD.CONF Include /var/jakarta-tomcat-5.5.9/conf/mod_jk.conf MOD_JK.CONF . NameVirtualHost xx.yy.zz.kk:80 DirectoryIndex index.htm index.html index.jsp ServerName www.aaa.com DocumentRoot /var/www/html/aaa JkMount /*.jsp ajp13 JkMount /servlet/* ajp13 SERVER.XML the default (appBase is $CATALINA_HOME/conf/webapps) the file : $CATALINA_HOME/conf/Catalina/locahost/aaa.xml - Yahoo! Mail: gratis 1GB per i messaggi, antispam, antivirus, POP3
Re: Mod_jk + Apache on RHEL3 gives 503 for jsp only
--- "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote: > I have jakarta-tomcat-5.5.9 installed and working > properly on the new > server. It is perfectly accessible from the legacy > web server. By perfectly accessible you mean . . . ? > The main page, home.jsp, loads fine in the servlet > if no page is given. > http://webserver/PI/ The home.jsp spawns a 503 if > is in the URL. > http://webserver/PI/home.jsp I can successfully > get images from the > page from the tomcat instance. It does not like the > .jsp extension. By successfully getting images, do you mean: http://webserver/PI/image.png or http://tomcatserver:8080/PI/image.png > I have watched in Ethereal as no traffic goes from > the apache to the > tomcat. > I have tried using the loopback and local network > address. Why? Is this Tomcat instance on the same server? > > #INSERT OF TOMCAT CONF PARAMETERS > # Load mod_jk module > # LoadModule jk_module modules/mod_jk.so > LoadModule jk_module /etc/httpd/modules/mod_jk.so > > # Declare the module for > #AddModule mod_jk.c > > # Where to find workers.properties > JkWorkersFile /etc/httpd/conf/workers.properties > > # Where to put jk logs > JkLogFile /var/log/httpd/mod_jk.log > > # Set the jk log level [debug/error/info] > JkLogLevel debug > > # Select the log format > JkLogStampFormat "[%a %b %d %H:%M:%S %Y] " > > # JkOptions indicate to send SSL KEY SIZE, > JkOptions +ForwardKeySize +ForwardURICompat > -ForwardDirectories > > # JkRequestLogFormat set the request format > JkRequestLogFormat "%w %V %T" > I don't see the specification for JkShmFile > # Send servlet for context /examples to worker named > worker1 > JkMount /examples/servlet/* worker1 The above should be: JkMount /servlets-examples/servlet/* worker1 > JkMount /PI/* worker3 > #JkMount /PI/*.jsp worker3 Why are you using worker3 here? > # Send JSPs for context /examples to worker named > worker1 > JkMount /examples/*.jsp worker1 The above shoould be /jsp-examples/*.jsp worker1 > JkMount /journals/*.jsp worker1 > > Worker Properties > /etc/httpd/conf/workers.properties > # Define some properties > workers.apache_log=/var/log/httpd/ > workers.tomcat_home=/usr/local/tomcat/jakarta-tomcat-5.5.9 > workers.java_home=/usr/bin/java > ps=/ > > # > worker.list=worker1 > According to the documentation this should contain a comma separated list of all the workers. However, if you're going to the same Tomcat instance all the time, you'll only need one worker definition > # Set properties for worker1 (ajp13) > worker.worker1.type=ajp13 > worker.worker1.host=172.20.1.19 > worker.worker1.port=8009 > First of all, there should only be one worker list. Second of all, why do you have multiple workers going to the same host but different ports? Do you have multiple Tomcats running on this host? > # > worker.list=worker2 > > # Set properties for worker2 (ajp13) > worker.worker2.type=ajp13 > worker.worker2.host=172.20.1.19 > worker.worker2.port=10009 > > # > worker.list=worker3 > > # Set properties for worker3 (ajp13) > worker.worker3.type=ajp13 > worker.worker3.host=127.0.0.1 > worker.worker3.port=8099 > > # > worker.list=worker4 > > # Set properties for worker4 (ajp13) > worker.worker4.type=ajp13 > worker.worker4.host=172.20.1.19 > worker.worker4.port=8099 Even after all that is done, there are some other issues when connecting Apache httpd and Tomcat. If Apache's DocumentRoot does not correspond to Tomcat's appBase, then any static files contained in the application will not be served by Apache without some more Apache configuration changes. There are several ways of accomplishing this, using the Directory directive and Aliases or JkAutoAlias in Apache's httpd.conf. /mde/ __ Yahoo! Mail - PC Magazine Editors' Choice 2005 http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Mod_jk + Apache on RHEL3 gives 503 for jsp only
Hello, I have a website that I am migrating to a new server. Server is Redhat ES3 2.4.21-20.0.1.ELsmp. Server version: Apache/2.0.46 I have jakarta-tomcat-5.5.9 installed and working properly on the new server. It is perfectly accessible from the legacy web server. On the Website on the new server, access to jsp based pages give a 503 error. The main page, home.jsp, loads fine in the servlet if no page is given. http://webserver/PI/ The home.jsp spawns a 503 if is in the URL. http://webserver/PI/home.jsp I can successfully get images from the page from the tomcat instance. It does not like the .jsp extension. In the mod_jk log I can see the match made: [Wed Sep 28 10:29:14 2005] [18841:2816] [debug] map_uri_to_worker::jk_uri_worker_map.c (461): Attempting to map context URI '/PI/*' [Wed Sep 28 10:29:14 2005] [18841:2816] [debug] map_uri_to_worker::jk_uri_worker_map.c (475): Found a wildchar match worker3 -> /PI/* However, in the apache access log is the 503. xxx.89.23.173 - - [28/Sep/2005:10:29:14 -0400] "GET /PI/home.jsp HTTP/1.1" 503 412 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7" SESSIONID=128F9AD992A16BC3D3EB1ED0AD5549C1 I have watched in Ethereal as no traffic goes from the apache to the tomcat. I have tried using the loopback and local network address. I have tried adding a *.jsp directive to the mod_jk config for the servlet. Any help would be appreciated. I have a dent in my desk from hitting it with my forehead. Apache Config: #INSERT OF TOMCAT CONF PARAMETERS # Load mod_jk module # LoadModule jk_module modules/mod_jk.so LoadModule jk_module /etc/httpd/modules/mod_jk.so # Declare the module for #AddModule mod_jk.c # Where to find workers.properties JkWorkersFile /etc/httpd/conf/workers.properties # Where to put jk logs JkLogFile /var/log/httpd/mod_jk.log # Set the jk log level [debug/error/info] JkLogLevel debug # Select the log format JkLogStampFormat "[%a %b %d %H:%M:%S %Y] " # JkOptions indicate to send SSL KEY SIZE, JkOptions +ForwardKeySize +ForwardURICompat -ForwardDirectories # JkRequestLogFormat set the request format JkRequestLogFormat "%w %V %T" # Send servlet for context /examples to worker named worker1 JkMount /examples/servlet/* worker1 JkMount /PI/* worker3 #JkMount /PI/*.jsp worker3 # Send JSPs for context /examples to worker named worker1 JkMount /examples/*.jsp worker1 JkMount /journals/*.jsp worker1 Worker Properties /etc/httpd/conf/workers.properties # Define some properties workers.apache_log=/var/log/httpd/ workers.tomcat_home=/usr/local/tomcat/jakarta-tomcat-5.5.9 workers.java_home=/usr/bin/java ps=/ # worker.list=worker1 # Set properties for worker1 (ajp13) worker.worker1.type=ajp13 worker.worker1.host=172.20.1.19 worker.worker1.port=8009 # worker.list=worker2 # Set properties for worker2 (ajp13) worker.worker2.type=ajp13 worker.worker2.host=172.20.1.19 worker.worker2.port=10009 # worker.list=worker3 # Set properties for worker3 (ajp13) worker.worker3.type=ajp13 worker.worker3.host=127.0.0.1 worker.worker3.port=8099 # worker.list=worker4 # Set properties for worker4 (ajp13) worker.worker4.type=ajp13 worker.worker4.host=172.20.1.19 worker.worker4.port=8099 _ Tim Pickard CrossRef Systems Support Analyst and Administrator 40 Salem Street Lynnfield, MA 01940 tpickard at crossref dot org 781 295 0072 x27 __
Re: Mod_jk setup problems
Glad I was able to help a little bit. In my experience (Linux,Solaris,Win/2K), 8080 should always work if you have the Connector configured. If you can't get to http://localhost:8080/jsp-examples/ running, then there is something else amiss. In your httpd.conf file, I still didn't see something like the following: JkShmFile /var/log/memory.shm This wasn't necessary in 1.2.6 and may not be necessary in 1.2.14, but according to the documentation it's used on UNIX platforms. In workers.properties lbfactor is used to set the relative weight of a worker when you're doing load balancing. Since you're not doing load balancing, letting it default to 1 should be fine. You have two JkMounts for docstore. I'm thinking that only: JkMount /docstore/* worker1 is necessary. If the entire web application (including static files) lives in $CATALINA_HOME/webapps, then the Apache process will need access to those directories and files. Finally, a long time ago the order of startup was important. I think it was Tomcat first, then Apache. It's been a while, and right now I'm on the Windows side of this machine so I can't check. The order of startup issue went away with Apache 2.0.x, but it may still be an issue with your environment (Apache 1.3.x). I would be interested in seeing your error logs from mod_jk as well as seeing what catalina.out has in it when you try to get to a web application via port 8080. Hope this gives you some avenues to explore. /mde/ __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Mod_jk setup problems
Thanks Mark, I this helped a lot ... I'll insert comments as well... ;) Mark Eggers wrote: A couple of things here. I'll try to insert comment where appropriate. --- Don Boling <[EMAIL PROTECTED]> wrote: I can't seem to get anything to successfully pass though the mod_jk connector to the webapp. What version of mod_jk? mod_jk 1.2.14 My mod_jk.conf , workers.properties are as follows. $ less mod_jk.conf # JkWorkersFile /usr/local/etc/apache/workers.properties JkLogFile /var/log/jk.log JkLogLevel debug Later versions of mod_jk need JkShmFile on UNIX. I removed the loadbalance setting... do I still need this? I have not seen any reference as to what this should be set to. JkMount /*.jsp worker1 JkMount /servlet/* worker1 JkMount /examples/* worker1 JkMount /docstore worker1 JkMount /docstore/* worker1 My installs of Tomcat on Linux and Windows do not have an examples web application. I have /jsp-examples and a /servlets-examples contexts. You might try: JkMount /jsp-examples/*.jsp worker1 JkMount /servlet-examples/servlet/* worker1 I corrected these, thanks for pointing those out... I don't know what your other applications are, but I'll comment on a general setup in a bit. # Define 1 real worker using ajp13 worker.list=worker1 # Set properties for worker1 (ajp13) worker.worker1.type=ajp13 worker.worker1.host=localhost worker.worker1.port=8009 worker.worker1.lbfactor=50 worker.worker1.cachesize=10 worker.worker1.cache_timeout=600 worker.worker1.socket_keepalive=1 worker.worker1.reclycle_timeout=300 You probably don't need worker.worker1.lbfactor since you're not using load balancing. Recycle (worker.worker1.reclycle_timeout) needs to be spelled correctly. oops, thanks ... new mod_jk.conf is ... $ less mod_jk.conf # JkWorkersFile /usr/local/etc/apache/workers.properties JkLogFile /var/log/jk.log JkLogLevel debug ServerName localhost # Sample JkMounts. Replace these with the paths you would # like to mount from your JSP server. JkMount /*.jsp worker1 JkMount /servlet-examples/servlet/* worker1 JkMount /jsp-examples/*.jsp worker1 JkMount /docstore worker1 JkMount /docstore/* worker1 mod_jk.conf (END) [Lots of log stuff deleted] With the exceptin of docstore, I did not see anything that matched your JkMount statements. Since there was no match, no requests were forwarded. In general, you will probably not have $CATALINA_HOME/webapps and Apache's DocumentRoot ovelapping each other. Since they don't overlap, Apache will not know anything about static files (html, css, etc.) that live in $CATALINA_HOME/webapps. You can use Directory and Alias directives in Apache to set up access and map the directory into a URI space that Apache knows about. With later versions of mod_jk, you can use JkAutoAlias to map directories for you. From the documentation at http://jakarta.apache.org/tomcat/connectors-doc/config/apache.html JkAutoAlias /opt/tomcat/webapps Then you can use JkMount to map certain requests (*.jsp, /*/servlet/*). JkMount /jsp-examples/*.jsp worker1 The value of JkAutoAlias appears to be prepended to the JkMount directive to find the physical location. I've not used JkAutoAlias, but this appears to be a nice alternative to Directory and Alias directives in httpd.conf. I am trying the JkAutoAlias route ... almost there. In short: 1. Add JkShmFile to httpd.conf 2. Remove lbfactor from workers.properties 3. Change the spelling of recycle 4. Use JkAutoAlias or Directory / Alias directives to put the appropriate directories within Apache's document and URI space. I hope that gets you up and running. /mde/ I have it running now with 'less' errors in jk.log ... I have noticed that 8080 is not responding any more if I just try to hit TC directly so I think, correct me if I'm wrong... this won't work even if setup correctly, until I fix that. Thanks again, Don - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Mod_jk setup problems
A couple of things here. I'll try to insert comment where appropriate. --- Don Boling <[EMAIL PROTECTED]> wrote: > I can't seem to get anything to successfully pass > though the mod_jk connector to the webapp. What version of mod_jk? > My mod_jk.conf , workers.properties are as follows. > > $ less mod_jk.conf > # > JkWorkersFile > /usr/local/etc/apache/workers.properties > JkLogFile /var/log/jk.log > JkLogLevel debug Later versions of mod_jk need JkShmFile on UNIX. > JkMount /*.jsp worker1 > JkMount /servlet/* worker1 > JkMount /examples/* worker1 > JkMount /docstore worker1 > JkMount /docstore/* worker1 My installs of Tomcat on Linux and Windows do not have an examples web application. I have /jsp-examples and a /servlets-examples contexts. You might try: JkMount /jsp-examples/*.jsp worker1 JkMount /servlet-examples/servlet/* worker1 I don't know what your other applications are, but I'll comment on a general setup in a bit. > # Define 1 real worker using ajp13 > worker.list=worker1 > # Set properties for worker1 (ajp13) > worker.worker1.type=ajp13 > worker.worker1.host=localhost > worker.worker1.port=8009 > worker.worker1.lbfactor=50 > worker.worker1.cachesize=10 > worker.worker1.cache_timeout=600 > worker.worker1.socket_keepalive=1 > worker.worker1.reclycle_timeout=300 You probably don't need worker.worker1.lbfactor since you're not using load balancing. Recycle (worker.worker1.reclycle_timeout) needs to be spelled correctly. [Lots of log stuff deleted] With the exceptin of docstore, I did not see anything that matched your JkMount statements. Since there was no match, no requests were forwarded. In general, you will probably not have $CATALINA_HOME/webapps and Apache's DocumentRoot ovelapping each other. Since they don't overlap, Apache will not know anything about static files (html, css, etc.) that live in $CATALINA_HOME/webapps. You can use Directory and Alias directives in Apache to set up access and map the directory into a URI space that Apache knows about. With later versions of mod_jk, you can use JkAutoAlias to map directories for you. From the documentation at http://jakarta.apache.org/tomcat/connectors-doc/config/apache.html JkAutoAlias /opt/tomcat/webapps Then you can use JkMount to map certain requests (*.jsp, /*/servlet/*). JkMount /jsp-examples/*.jsp worker1 The value of JkAutoAlias appears to be prepended to the JkMount directive to find the physical location. I've not used JkAutoAlias, but this appears to be a nice alternative to Directory and Alias directives in httpd.conf. In short: 1. Add JkShmFile to httpd.conf 2. Remove lbfactor from workers.properties 3. Change the spelling of recycle 4. Use JkAutoAlias or Directory / Alias directives to put the appropriate directories within Apache's document and URI space. I hope that gets you up and running. /mde/ __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Mod_jk setup problems
Hi, I am running Tomcat5.5.9 and JDK1.5.0_04 with a Apache 1.3 webserver on FreeBSD 5.3. I can't seem to get anything to successfully pass though the mod_jk connector to the webapp. My mod_jk.conf , workers.properties are as follows. $ less mod_jk.conf # JkWorkersFile /usr/local/etc/apache/workers.properties JkLogFile /var/log/jk.log JkLogLevel debug ServerName localhost # Sample JkMounts. Replace these with the paths you would # like to mount from your JSP server. JkMount /*.jsp worker1 JkMount /servlet/* worker1 JkMount /examples/* worker1 JkMount /docstore worker1 JkMount /docstore/* worker1 mod_jk.conf (END) $ less workers.properties # Setting Tomcat & Java Home workers.tomcat_home=/usr/local/jakarta-tomcat5.5/ workers.java_home=/usr/local/jdk1.5.0/ ps=/ # Define 1 real worker using ajp13 worker.list=worker1 # Set properties for worker1 (ajp13) worker.worker1.type=ajp13 worker.worker1.host=localhost worker.worker1.port=8009 worker.worker1.lbfactor=50 worker.worker1.cachesize=10 worker.worker1.cache_timeout=600 worker.worker1.socket_keepalive=1 worker.worker1.reclycle_timeout=300 workers.properties (END) When I start Tomcat & Apache... is seems to start ok , but I get this output in the jk.log file ... $ less /var/log/jk.log [Sun Sep 18 21:37:30 2005] [6691:] [error] jk_init::mod_jk.c (2035): Initializing shm:/usr/local/logs/jk-runtime-status errno=2 [Sun Sep 18 21:37:30 2005] [6691:] [debug] uri_worker_map_open::jk_uri_worker_map.c (323): rule map size is 0 [Sun Sep 18 21:37:30 2005] [6691:] [debug] build_worker_map::jk_worker.c (236): creating worker worker1 [Sun Sep 18 21:37:30 2005] [6691:] [debug] wc_create_worker::jk_worker.c (141): about to create instance worker1 of ajp13 [Sun Sep 18 21:37:30 2005] [6691:] [debug] wc_create_worker::jk_worker.c (154): about to validate and init worker1 [Sun Sep 18 21:37:30 2005] [6691:] [debug] ajp_validate::jk_ajp_common.c (1806): worker worker1 contact is 'localhost:8009' [Sun Sep 18 21:37:30 2005] [6691:] [debug] ajp_init::jk_ajp_common.c (1895): setting socket keepalive to 1 [Sun Sep 18 21:37:30 2005] [6691:] [debug] ajp_init::jk_ajp_common.c (1934): setting socket timeout to -1 [Sun Sep 18 21:37:30 2005] [6691:] [debug] ajp_init::jk_ajp_common.c (1938): setting socket buffer size to 0 [Sun Sep 18 21:37:30 2005] [6691:] [debug] ajp_init::jk_ajp_common.c (1942): setting connection recycle timeout to 0 [Sun Sep 18 21:37:30 2005] [6691:] [debug] ajp_init::jk_ajp_common.c (1946): setting cache timeout to 600 [Sun Sep 18 21:37:30 2005] [6691:] [debug] ajp_init::jk_ajp_common.c (1950): setting connect timeout to 0 [Sun Sep 18 21:37:30 2005] [6691:] [debug] ajp_init::jk_ajp_common.c (1954): setting reply timeout to 0 [Sun Sep 18 21:37:30 2005] [6691:] [debug] ajp_init::jk_ajp_common.c (1958): setting prepost timeout to 0 [Sun Sep 18 21:37:30 2005] [6691:] [debug] ajp_init::jk_ajp_common.c (1962): setting recovery opts to 0 [Sun Sep 18 21:37:30 2005] [6691:] [debug] ajp_init::jk_ajp_common.c (1966): setting number of retries to 3 [Sun Sep 18 21:37:30 2005] [6691:] [debug] ajp_create_endpoint_cache::jk_ajp_common.c (1843): setting connection cache size to 10 [Sun Sep 18 21:37:30 2005] [6691:] [debug] build_worker_map::jk_worker.c (248): removing old worker1 worker [Sun Sep 18 21:39:14 2005] [7500:] [debug] map_uri_to_worker::jk_uri_worker_map.c (449): Attempting to map URI '/docstore/' from 0 maps [Sun Sep 18 22:48:11 2005] [7501:] [debug] map_uri_to_worker::jk_uri_worker_map.c (449): Attempting to map URI '/' from 0 maps [Sun Sep 18 22:48:11 2005] [7501:] [debug] map_uri_to_worker::jk_uri_worker_map.c (449): Attempting to map URI '/index.html' from 0 maps [Sun Sep 18 22:48:11 2005] [7501:] [debug] map_uri_to_worker::jk_uri_worker_map.c (449): Attempting to map URI '/HEADER.html' from 0 maps [Sun Sep 18 22:48:11 2005] [7501:] [debug] map_uri_to_worker::jk_uri_worker_map.c (449): Attempting to map URI '/README.html' from 0 maps [Sun Sep 18 23:54:42 2005] [7503:] [debug] map_uri_to_worker::jk_uri_worker_map.c (449): Attempting to map URI '/' from 0 maps [Sun Sep 18 23:54:42 2005] [7503:] [debug] map_uri_to_worker::jk_uri_worker_map.c (449): Attempting to map URI '/index.html' from 0 maps [Sun Sep 18 23:54:42 2005] [7503:] [debug] map_uri_to_worker::jk_uri_worker_map.c (449): Attempting to map URI '/HEADER.html' from 0 maps [Sun Sep 18 23:54:42 2005] [7503:] [debug] map_uri_to_worker::jk_uri_worker_map.c (449): Attempting to map URI '/README.html' from 0 maps [Sun Sep 18 23:55:51 2005] [7507:] [debug] map_uri_to_worker::jk_uri_worker_map.c (449): Attempting to map URI '/' from 0 maps [Sun Sep 18 23
Re: mod_jk performance
Hi Peter, That is why I mentioned it. We deliver our static content from other servers, and had originally considered hiding our TCs behind apache for 'security reasons'. After seeing the speed difference, and the fact that their isn't really a security difference if you just push all the traffic straight through anyway, we decided not to put Apache between our users and our Tomcat servers. If I didn't need to use re-writes, and complicated rules on our apaches, I would also use THTTP for performance reasons. Andrew On Sep 16, 2005, at 3:39 PM, Peter Flynn wrote: OK, that's useful information. But I have 300,000+ static HTML files to server, and about 10 JSP files. I'm surely not switching my entire server to Tomcat...:-) - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: mod_jk performance
On Wed, 2005-09-14 at 18:52, Mark Thomas wrote: > KEREM ERKAN wrote: > > Tomcat is harder to configure and -sadly- it has a far worse documentation > > than Apache (for now). > > I look forward to seeing your documentation patches in Bugzilla ;) I will certainly document how to fix my problem once it's fixed, but anything I have ever sent to Bugzilla either gets ignored or argued about ad infinitum and nothing ever done, so any doc I write will go on my blog or my web site (from where anyone is free to take/copy it). ///Peter - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: mod_jk performance
On Wed, 2005-09-14 at 13:50, Andrew Miehs wrote: > We did some comparisons between running Tomcat 5.0 standalone, or TC > 5.0 and Apache 2.0 > > If you are ONLY delivering JSPs, we found that we could only deal > with 50% of the requests when running combined Apache TC and mod_jk OK, that's useful information. But I have 300,000+ static HTML files to server, and about 10 JSP files. I'm surely not switching my entire server to Tomcat...:-) ///Peter - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Tomcat directory protection (was: Re: mod_jk performance
On Wed, 2005-09-14 at 13:29, Hassan Schroeder wrote: > KEREM ERKAN wrote: > > Apache has better directory/file restricting and handling than Tomcat > > better in what way? What actual *security* issue are we talking > about -- in other words, what exploit is Tomcat susceptible to > that Apache is not? I don't know if Kerem Erkan was talking about exploits, but I have looked for some facility in Tomcat equivalent to Apache .htaccess files and failed to find any mention of them. Is it possible to do this kind of IP-level or simple username/password restriction in Tomcat? ///Peter - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Apache + mod_jk + Tomcat ... SSL Problems
Hello, we are using the following versions: Apache 2.0.47 mod_jk (not mod_jk2) Tomcat 5.5.9 The SSL-Feature is backed by openssl 0.9.7c. We configured mod_jk to send the SSL information to the tomcat engine: JkHTTPSIndicator HTTPS JkSESSIONIndicator SSL_SESSION_ID JkCIPHERIndicator SSL_CIPHER JkCERTSIndicator SSL_CLIENT_CERT And we configured the SSL-Module of Apache to use the SSL-Cache and to hold the SSL Session for 30 Minutes. SSLSessionCache dbm:logs/ssl_scache SSLSessionCacheTimeout 1800 Using the trick described in the tomcat documenation, I could activate and use the Session Tracking via the SSL Session ID, which is exactly what we wanted because so we don't need cookies or URL-Rewriting. To manage the SSL Sessions I implemented my own SSLSessionManager-Class in my Webapplication and all worked fine, except one little problem: The SSL Session Key seems to get lost by Apache or mod_ssl or OpenSSL! I used a test application in my servlet engine to experiment with the "session tracking via ssl session id"-feature. That application showed me if the SSL Session ID was set, what value it has, what my own SessionManagement-Class knew about that session (when it was created, when it was used last time, how long until expiration, which attributes are managed for that session). The SessionManager was configured to hold every SSL Session for unlimited time, only to set an internal "invalid"-flag after a configured time of 30 minutes. The test application showed that in newly started application instances (apache, tomcat) the SSL Session worked properly and the SSL Session ID was created. When reloading the test application repeatedly, that SSL Session ID kept its value. Bingo! All that I needed. But then... Few minutes later the test application showed that there was *no* SSL Session ID available within the https-request any longer. When I reloaded the test application again, a new SSL Session ID was created. This happened again and again later, always far earlier than the SSLSessionCache was configured. Then I used tomcat's web-connector and tried the same - and there the SSL Session ID worked properly and wasn't lost preemptively. Does someone know something about problems with SSL Session IDs with Apache und mod_jk? Does someone have a solution how to remove that problem? Thank you in advance, Oliver Schoenwald University of Hagen, Germany - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: mod_jk performance
> -Original Message- > From: Mark Thomas [mailto:[EMAIL PROTECTED] > Sent: Wednesday, September 14, 2005 8:53 PM > To: Tomcat Users List > Subject: Re: mod_jk performance > > KEREM ERKAN wrote: > > Tomcat is harder to configure and -sadly- it has a far worse > > documentation than Apache (for now). > > I look forward to seeing your documentation patches in Bugzilla ;) > > Mark > I would really love to. As soon as I get more experience on Tomcat (I work with Tomcat for approx. 6-7 months), I will try to contribute a little. ;) Don't get me wrong, but Tomcat documentation is not very explanatory and does not have many examples for a newbie to get his hands on Tomcat easily. Cheers, Kerem
Re: mod_jk performance
Well since I don't understand German, I don't konw how he tested. However in my stress testing which lots of static and JSPs, I found Apache + mod_jk performance is a littlle higher than TOMCAT only. I configured Apache with mod_cache. So I think only handling JSPs, TC only could be better than Apache + mod_jk. However in the real world, there is never only JSPs, there must have lots of static files. Thx, Xuekun - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: mod_jk performance
KEREM ERKAN wrote: Tomcat is harder to configure and -sadly- it has a far worse documentation than Apache (for now). I look forward to seeing your documentation patches in Bugzilla ;) Mark - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: mod_jk performance
> -Original Message- > From: Lionel Farbos [mailto:[EMAIL PROTECTED] > Sent: Wednesday, September 14, 2005 5:49 PM > To: Tomcat Users List > Cc: KEREM ERKAN > Subject: Re: mod_jk performance > > On Wed, 14 Sep 2005 17:27:29 +0300 > KEREM ERKAN <[EMAIL PROTECTED]> wrote: > > > > > > > Well, mod_jk > 1.2.10 seems slower than 1.2.10 when stress > > > tested. The > > > > tests completed in more time. I do not have the actual test > > > results, > > > > because we have been using 1.2.10 for several months, maybe > > > I can send > > > > them when I test 1.2.14. > > > > > > > I'm interested in such tests (or a link if it exists). > > > > You can try Microsoft's Web Stress Tool which is free but > it is old. I > > am also actually searching for a better stress tool. > > > > > http://www.microsoft.com/downloads/details.aspx?FamilyID=E2C0585A-062A > > -439E- > > A67D-75A89AA36495&displaylang=en > > I don't search a Stress Tool; I say I'm interest in the > result of the stress. Well as I said, I do not have the results for now, but when I test 1.2.14, I will surely share the results with the list. Cheers, Kerem smime.p7s Description: S/MIME cryptographic signature
Re: mod_jk performance
On Wed, 14 Sep 2005 17:27:29 +0300 KEREM ERKAN <[EMAIL PROTECTED]> wrote: > > > > Well, mod_jk > 1.2.10 seems slower than 1.2.10 when stress > > tested. The > > > tests completed in more time. I do not have the actual test > > results, > > > because we have been using 1.2.10 for several months, maybe > > I can send > > > them when I test 1.2.14. > > > > > I'm interested in such tests (or a link if it exists). > > You can try Microsoft's Web Stress Tool which is free but it is old. I am > also actually searching for a better stress tool. > > http://www.microsoft.com/downloads/details.aspx?FamilyID=E2C0585A-062A-439E- > A67D-75A89AA36495&displaylang=en I don't search a Stress Tool; I say I'm interest in the result of the stress. Another free Stress Tool is JMeter (http://jakarta.apache.org/jmeter/) Under Linux, I also used httperf (http://www.hpl.hp.com/research/linux/httperf/) and autobench (http://www.xenoclast.org/autobench/) Regards. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: mod_jk performance
> > Well, mod_jk > 1.2.10 seems slower than 1.2.10 when stress > tested. The > > tests completed in more time. I do not have the actual test > results, > > because we have been using 1.2.10 for several months, maybe > I can send > > them when I test 1.2.14. > > > I'm interested in such tests (or a link if it exists). You can try Microsoft's Web Stress Tool which is free but it is old. I am also actually searching for a better stress tool. http://www.microsoft.com/downloads/details.aspx?FamilyID=E2C0585A-062A-439E- A67D-75A89AA36495&displaylang=en > > > By the way mod_jk site mentions 1.2.13 as its testing version. Is > > there a > > 1.2.14 really or did you write 14 by mistake? > > > I wanted to say mod_jk 1.2.14 : it's not a mistake... > but I don't understand what this meens ...?!? It seems there is a confusion in mod_jk's own site :-) I will download and compile 1.2.14 in a spare time and see how it performs. Cheers, Kerem smime.p7s Description: S/MIME cryptographic signature
Re: mod_jk performance
So, I think your solution with F5 BigIPs->Tomcat is equivalent to the solution with Apache/mod_jk->Tomcat But the last is free and I don't know the difference in performances between the 2 solutions. On Wed, 14 Sep 2005 15:14:01 +0200 Andrew Miehs <[EMAIL PROTECTED]> wrote: > We run F5 BigIPs as our loadbalancers, and have seperated images, etc > onto another server > > IE: i.domain.com for images, and www.domain.com for dynamic content. > > F5 provides a feature call iRules to do the splitting between hosts > for you, but I would > NOT use this on a high traffic site. > > Andrew > > On Sep 14, 2005, at 2:58 PM, Lionel Farbos wrote: > > > But, in a web site, there is never only JSPs : there is a lot of > > static files (images, css, js, ...) > > So, if you don't have a apache in the frontend to deliver theses > > static files, there is an overload for the TC server... > > > > So, your tests stressed only light JSPs or a real site ? > > and what is your solution for load-balancing/failover ? > > > > On Wed, 14 Sep 2005 14:50:52 +0200 > > Andrew Miehs <[EMAIL PROTECTED]> wrote: > > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: mod_jk performance
On Wed, 14 Sep 2005 16:16:59 +0300 KEREM ERKAN <[EMAIL PROTECTED]> wrote: > Well, mod_jk > 1.2.10 seems slower than 1.2.10 when stress tested. The tests > completed in more time. I do not have the actual test results, because we > have been using 1.2.10 for several months, maybe I can send them when I test > 1.2.14. > I'm interested in such tests (or a link if it exists). > By the way mod_jk site mentions 1.2.13 as its testing version. Is there a > 1.2.14 really or did you write 14 by mistake? > I wanted to say mod_jk 1.2.14 : it's not a mistake... but I don't understand what this meens ...?!? I receive this mail (see Announce_mod_jk_1.2.14 above) on July 26th and, at this date, the mod_jk site mentioned 1.2.14 as the latest and stable version (you can see the content of this version on the changelog : http://jakarta.apache.org/tomcat/connectors-doc/changelog.html) Now, the mod_jk site mention 1.2.13 as the latest stable version... But the latest source version is : 1.2.14 !!! http://www.apache.org/dist/jakarta/tomcat-connectors/jk/source/ So, Mladen, what this means ? What is the current stable version ? - Announce_mod_jk_1.2.14 received on July 26th : - Delivery-date: Tue, 26 Jul 2005 23:35:01 +0200 List-Post: <mailto:announcements@jakarta.apache.org> List-Id: "Jakarta Announcements List" Reply-To: "Jakarta General List" Delivered-To: mailing list announcements@jakarta.apache.org Received: (qmail 226 invoked by uid 99); 26 Jul 2005 21:26:36 - Date: Tue, 26 Jul 2005 23:26:31 +0200 From: Jean-frederic Clere <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.3) Gecko/20041023 X-Accept-Language: en, fr MIME-Version: 1.0 To: announcements@jakarta.apache.org, tomcat-user@jakarta.apache.org, tomcat-dev@jakarta.apache.org, announce@apache.org Subject: [ANN] Apache Tomcat mod_jk 1.2.14 Web Server Connector released Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org The Apache Tomcat team is pleased to announce the release of version 1.2.14 of the Apache Tomcat mod_jk web server connector. Tomcat is the reference implementation of a web application server which implements the Java Servlet and JavaServer Pages specifications. mod_jk is a connector which allows a web server such as Apache HTTPD to act as a front end to the Tomcat web application server. This version fixes a number of minor bugs. See http://jakarta.apache.org/tomcat/connectors-doc/changelog.html for a complete list of changes. Source distribtions can be downloaded from an Apache Software Foundation mirror at: (they are named jakarta-tomcat-connectors-1.2.14.1-src.tar.gz and jakarta-tomcat-connectors-1.2.14.1-src.zip) http://jakarta.apache.org/site/sourceindex.cgi Binary distributions for a number of different operating systems and web servers can be downloaded from an Apache Software Foundation mirror at: http://jakarta.apache.org/site/binindex.cgi Documentation for using mod_jk with Tomcat 3.3, 4.1, 5.0 and 5.5 can be found at: http://jakarta.apache.org/tomcat/ The Apache Tomcat team. - > Cheers, > > Kerem > > > -Original Message- > > From: Lionel Farbos [mailto:[EMAIL PROTECTED] > > Sent: Wednesday, September 14, 2005 3:51 PM > > To: Tomcat Users List > > Cc: KEREM ERKAN > > Subject: Re: mod_jk performance > > > > On Wed, 14 Sep 2005 14:55:08 +0300 > > KEREM ERKAN <[EMAIL PROTECTED]> wrote: > > > > > Mod_jk > 1.2.10 had some performance problems but I did not > > > thoroughly test why. > > > > Is is proved ? Where do you find this ? > > I tested mod_jk 1.2.14 (but not stressed it) and it seems to > > be a good version... > > What sort of performance problems do you mention ? > > > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: mod_jk performance
Well, mod_jk > 1.2.10 seems slower than 1.2.10 when stress tested. The tests completed in more time. I do not have the actual test results, because we have been using 1.2.10 for several months, maybe I can send them when I test 1.2.14. By the way mod_jk site mentions 1.2.13 as its testing version. Is there a 1.2.14 really or did you write 14 by mistake? Cheers, Kerem > -Original Message- > From: Lionel Farbos [mailto:[EMAIL PROTECTED] > Sent: Wednesday, September 14, 2005 3:51 PM > To: Tomcat Users List > Cc: KEREM ERKAN > Subject: Re: mod_jk performance > > On Wed, 14 Sep 2005 14:55:08 +0300 > KEREM ERKAN <[EMAIL PROTECTED]> wrote: > > > Mod_jk > 1.2.10 had some performance problems but I did not > > thoroughly test why. > > Is is proved ? Where do you find this ? > I tested mod_jk 1.2.14 (but not stressed it) and it seems to > be a good version... > What sort of performance problems do you mention ? >
Re: mod_jk performance
We run F5 BigIPs as our loadbalancers, and have seperated images, etc onto another server IE: i.domain.com for images, and www.domain.com for dynamic content. F5 provides a feature call iRules to do the splitting between hosts for you, but I would NOT use this on a high traffic site. Andrew On Sep 14, 2005, at 2:58 PM, Lionel Farbos wrote: But, in a web site, there is never only JSPs : there is a lot of static files (images, css, js, ...) So, if you don't have a apache in the frontend to deliver theses static files, there is an overload for the TC server... So, your tests stressed only light JSPs or a real site ? and what is your solution for load-balancing/failover ? On Wed, 14 Sep 2005 14:50:52 +0200 Andrew Miehs <[EMAIL PROTECTED]> wrote: - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: mod_jk performance
But, in a web site, there is never only JSPs : there is a lot of static files (images, css, js, ...) So, if you don't have a apache in the frontend to deliver theses static files, there is an overload for the TC server... So, your tests stressed only light JSPs or a real site ? and what is your solution for load-balancing/failover ? On Wed, 14 Sep 2005 14:50:52 +0200 Andrew Miehs <[EMAIL PROTECTED]> wrote: > We did some comparisons between running Tomcat 5.0 standalone, or TC > 5.0 and Apache 2.0 > > If you are ONLY delivering JSPs, we found that we could only deal > with 50% of the requests when running combined Apache TC and mod_jk > > Andrew > > > On Sep 14, 2005, at 2:45 PM, Lionel Farbos wrote: > > > I use Apache/mod_jk/Tomcat for a long time on production servers > > with load balancing/failover (and with high traffic sites) and I'm > > sure it's not 30% slower than a pure Tomcat. > > > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: mod_jk performance
On Wed, 14 Sep 2005 14:55:08 +0300 KEREM ERKAN <[EMAIL PROTECTED]> wrote: > Mod_jk > 1.2.10 had some performance problems > but I did not thoroughly test why. Is is proved ? Where do you find this ? I tested mod_jk 1.2.14 (but not stressed it) and it seems to be a good version... What sort of performance problems do you mention ? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: mod_jk performance
We did some comparisons between running Tomcat 5.0 standalone, or TC 5.0 and Apache 2.0 If you are ONLY delivering JSPs, we found that we could only deal with 50% of the requests when running combined Apache TC and mod_jk Andrew On Sep 14, 2005, at 2:45 PM, Lionel Farbos wrote: I use Apache/mod_jk/Tomcat for a long time on production servers with load balancing/failover (and with high traffic sites) and I'm sure it's not 30% slower than a pure Tomcat. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: mod_jk performance
I use Apache/mod_jk/Tomcat for a long time on production servers with load balancing/failover (and with high traffic sites) and I'm sure it's not 30% slower than a pure Tomcat. I use Apache to deliver static files, manage SSL and other apache specifics modules. Then, Tomcat only manage dynamics requests (servlets and JSPs) without SSL. With this distribution of the functions, the Tomcat is less stressed and its performances increase. And when the Tomcat load increase, I add a Tomcat in the cluster... So, I think it's a good way to use it. On Wed, 14 Sep 2005 11:46:51 + "marc ratun" <[EMAIL PROTECTED]> wrote: > Hi, > > I just read an article about webapp benchmarks [1] and they mentioned that > apache+mod_jk+tomcat is about 30% slower than pure tomcat. > > This is sad. Until now I believed that the performance decrease with > apache/mod_jk would be marginal. > > Putting apache/mod_jk before tomcat is very nice. I don't want to miss > it because it is a good way to integrate other modules. > > Is there any way to speed up apache/tomcat cooperation? > > > Marc > > [1] (german only) http://www.heise.de/ix/artikel/2005/10/124/ > > _ > FREE pop-up blocking with the new MSN Toolbar - get it now! > http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/ > > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: mod_jk performance
> -Original Message- > From: Hassan Schroeder [mailto:[EMAIL PROTECTED] > Sent: Wednesday, September 14, 2005 3:30 PM > To: Tomcat Users List > Subject: Re: mod_jk performance > > KEREM ERKAN wrote: > > Apache has better directory/file restricting and handling > than Tomcat > > better in what way? What actual *security* issue are we > talking about -- in other words, what exploit is Tomcat > susceptible to that Apache is not? > I am not aware of any critical exploits Apache or Tomcat have. As I said, I only think about restricting access to some of my server files. You may be able to do this with Tomcat but from my point of view, it is harder to configure. That's all. Cheers, Kerem smime.p7s Description: S/MIME cryptographic signature
Re: mod_jk performance
KEREM ERKAN wrote: Apache has better directory/file restricting and handling than Tomcat better in what way? What actual *security* issue are we talking about -- in other words, what exploit is Tomcat susceptible to that Apache is not? -- Hassan Schroeder - [EMAIL PROTECTED] Webtuitive Design === (+1) 408-938-0567 === http://webtuitive.com dream. code. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: mod_jk performance
Apache is easier to configure, but at a 50% performance hit for pure JSP pages Andrew On Sep 14, 2005, at 2:18 PM, KEREM ERKAN wrote: Apache has better directory/file restricting and handling than Tomcat, it is more customizable and it is much user/admin friendly to configure :-) (at least for me) - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: mod_jk performance
Apache has better directory/file restricting and handling than Tomcat, it is more customizable and it is much user/admin friendly to configure :-) (at least for me) I configure all security related stuff on Apache and have my Tomcat listen only on AJP connector with 127.0.0.1:8009. Tomcat is harder to configure and -sadly- it has a far worse documentation than Apache (for now). Best regards, Kerem > -Original Message- > From: Hassan Schroeder [mailto:[EMAIL PROTECTED] > Sent: Wednesday, September 14, 2005 3:13 PM > To: Tomcat Users List > Subject: Re: mod_jk performance > > KEREM ERKAN wrote: > > > ... I am looking to the security side of the problem and > > Apache+mod_jk does its job better than only Tomcat > concerning security. > > How so? > > -- > Hassan Schroeder - [EMAIL PROTECTED] > Webtuitive Design === (+1) 408-938-0567 === http://webtuitive.com > >dream. code. > > > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] >
RE: mod_jk performance
Kerem, You are probably right, I personnaly never faced any issues with any of them. However, Tom can you be more specific about the type of traffic your app has to serve and what are performance/response time requirements. Hardware and network, server and JVM configuration can also be either a bottleneck or a way to improve the overall performance of your syste. Ideally, when you have metrics on the different parts of the systems it is easier to tune . Bruno Georges Glencore International AG Tel. +41 41 709 3204 Fax +41 41 709 3000 KEREM ERKAN <[EMAIL PROTECTED] To: 'Tomcat Users List' ari.com.tr> cc: Subject: RE: mod_jk performance 14.09.05 14:00 Please respond Distribute: to "Tomcat Users Personal? |---| List"| [ ] x | |---| AFAIK mod_proxy performs worse than mod_jk. Just my 2 cents. Kerem > -Original Message- > From: Bruno Georges [mailto:[EMAIL PROTECTED] > Sent: Wednesday, September 14, 2005 2:58 PM > To: Tomcat Users List > Cc: tomcat-user@jakarta.apache.org > Subject: Re: mod_jk performance > > Marc > > If the performance of your app is not acceptable using mod_jk > , you could try other alternatives and still keep apache in > front to serve static content and use other modules. > You can use apache mod_proxy to forward request on 8080 [or > whatever your run tomcat on] to tomcat without going through > mod_jk There are pros and cons to take this approach, but it > may suffice in your case. > > Hope it helps. > > Bruno Georges > > Glencore International AG > Tel. +41 41 709 3204 > Fax +41 41 709 3000 > > > > > > "marc ratun" > > > <[EMAIL PROTECTED] To: > tomcat-user@jakarta.apache.org > > ail.com> cc: > > >Subject: > mod_jk performance > > 14.09.05 13:46 > > > Please respond Distribute: > > > to "Tomcat Users Personal? > |---| > > List" > | [ ] x | > > > |---| > > > > > > > > > > > > Hi, > > I just read an article about webapp benchmarks [1] and they > mentioned that > apache+mod_jk+tomcat is about 30% slower than pure tomcat. > > This is sad. Until now I believed that the performance > decrease with apache/mod_jk would be marginal. > > Putting apache/mod_jk before tomcat is very nice. I don't > want to miss it because it is a good way to integrate other modules. > > Is there any way to speed up apache/tomcat cooperation? > > > Marc > > [1] (german only) http://www.heise.de/ix/artikel/2005/10/124/ > > _ > FREE pop-up blocking with the new MSN Toolbar - get it now! > http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/ > > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > LEGAL DISCLAIMER. The contents of this e-mail and any > attachments are strictly confidential and they may not be &g
Re: mod_jk performance
KEREM ERKAN wrote: ... I am looking to the security side of the problem and Apache+mod_jk does its job better than only Tomcat concerning security. How so? -- Hassan Schroeder - [EMAIL PROTECTED] Webtuitive Design === (+1) 408-938-0567 === http://webtuitive.com dream. code. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: mod_jk performance
marc ratun wrote: Hi, I just read an article about webapp benchmarks [1] and they mentioned that apache+mod_jk+tomcat is about 30% slower than pure tomcat. This is sad. Until now I believed that the performance decrease with apache/mod_jk would be marginal. Why would that be sad? 30% performance decrease still offers you a 300% performance increase over CGI or mod_proxy. Since you decided to use mod_jk that uses AJP protocol for both binary HTTP and constant connection pool, you have also the load balancer capabilities that will allow you to either segment or double your backend application servers. Thus with two backend servers you will have both speed increase and failover over a single box implementation. OTOH if you just wish Apache with all the goodies, but with Servlet support, then 30% performance decrease is very much acceptable thought. If OTOH you don't need legacy Apache modules, use Tomcat 5.5 with Native support that will both outperform any Apache httpd server (and most others) for both for dynamic and static content. Regards, Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: mod_jk performance
AFAIK mod_proxy performs worse than mod_jk. Just my 2 cents. Kerem > -Original Message- > From: Bruno Georges [mailto:[EMAIL PROTECTED] > Sent: Wednesday, September 14, 2005 2:58 PM > To: Tomcat Users List > Cc: tomcat-user@jakarta.apache.org > Subject: Re: mod_jk performance > > Marc > > If the performance of your app is not acceptable using mod_jk > , you could try other alternatives and still keep apache in > front to serve static content and use other modules. > You can use apache mod_proxy to forward request on 8080 [or > whatever your run tomcat on] to tomcat without going through > mod_jk There are pros and cons to take this approach, but it > may suffice in your case. > > Hope it helps. > > Bruno Georges > > Glencore International AG > Tel. +41 41 709 3204 > Fax +41 41 709 3000 > > > > > > "marc ratun" > > > <[EMAIL PROTECTED] To: > tomcat-user@jakarta.apache.org > > ail.com> cc: > > >Subject: > mod_jk performance > > 14.09.05 13:46 > > > Please respond Distribute: > > > to "Tomcat Users Personal? > |---| > > List" > | [ ] x | > > > |---| > > > > > > > > > > > > Hi, > > I just read an article about webapp benchmarks [1] and they > mentioned that > apache+mod_jk+tomcat is about 30% slower than pure tomcat. > > This is sad. Until now I believed that the performance > decrease with apache/mod_jk would be marginal. > > Putting apache/mod_jk before tomcat is very nice. I don't > want to miss it because it is a good way to integrate other modules. > > Is there any way to speed up apache/tomcat cooperation? > > > Marc > > [1] (german only) http://www.heise.de/ix/artikel/2005/10/124/ > > _ > FREE pop-up blocking with the new MSN Toolbar - get it now! > http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/ > > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > LEGAL DISCLAIMER. The contents of this e-mail and any > attachments are strictly confidential and they may not be > used or disclosed by someone who is not a named recipient. > If you have received this email in error please notify the > sender by replying to this email inserting the word > "misdirected" as the message and delete this e-mail from your system. > > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] >
Re: mod_jk performance
Marc If the performance of your app is not acceptable using mod_jk , you could try other alternatives and still keep apache in front to serve static content and use other modules. You can use apache mod_proxy to forward request on 8080 [or whatever your run tomcat on] to tomcat without going through mod_jk There are pros and cons to take this approach, but it may suffice in your case. Hope it helps. Bruno Georges Glencore International AG Tel. +41 41 709 3204 Fax +41 41 709 3000 "marc ratun" <[EMAIL PROTECTED] To: tomcat-user@jakarta.apache.org ail.com> cc: Subject: mod_jk performance 14.09.05 13:46 Please respond Distribute: to "Tomcat Users Personal? |---| List"| [ ] x | |---| Hi, I just read an article about webapp benchmarks [1] and they mentioned that apache+mod_jk+tomcat is about 30% slower than pure tomcat. This is sad. Until now I believed that the performance decrease with apache/mod_jk would be marginal. Putting apache/mod_jk before tomcat is very nice. I don't want to miss it because it is a good way to integrate other modules. Is there any way to speed up apache/tomcat cooperation? Marc [1] (german only) http://www.heise.de/ix/artikel/2005/10/124/ _ FREE pop-up blocking with the new MSN Toolbar - get it now! http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] LEGAL DISCLAIMER. The contents of this e-mail and any attachments are strictly confidential and they may not be used or disclosed by someone who is not a named recipient. If you have received this email in error please notify the sender by replying to this email inserting the word "misdirected" as the message and delete this e-mail from your system. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: mod_jk performance
Well I tried both, and as my websites do not have a very high traffic (I have approximately a total of 50 GB per month) the speed is not primarily a concern to me, I am looking to the security side of the problem and Apache+mod_jk does its job better than only Tomcat concerning security. I have stress tested Apache+Tomcat and only Tomcat and it seems like %30 is too high. I can suggest using mod_jk 1.2.10 with Tomcat 5.5.9, surprisingly you get very similar results. Mod_jk > 1.2.10 had some performance problems but I did not thoroughly test why. I hope this may help a little. Cheers, Kerem > -Original Message- > From: marc ratun [mailto:[EMAIL PROTECTED] > Sent: Wednesday, September 14, 2005 2:47 PM > To: tomcat-user@jakarta.apache.org > Subject: mod_jk performance > > Hi, > > I just read an article about webapp benchmarks [1] and they > mentioned that > apache+mod_jk+tomcat is about 30% slower than pure tomcat. > > This is sad. Until now I believed that the performance > decrease with apache/mod_jk would be marginal. > > Putting apache/mod_jk before tomcat is very nice. I don't > want to miss it because it is a good way to integrate other modules. > > Is there any way to speed up apache/tomcat cooperation? > > > Marc > > [1] (german only) http://www.heise.de/ix/artikel/2005/10/124/ > > _ > FREE pop-up blocking with the new MSN Toolbar - get it now! > http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/ > > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] >
mod_jk performance
Hi, I just read an article about webapp benchmarks [1] and they mentioned that apache+mod_jk+tomcat is about 30% slower than pure tomcat. This is sad. Until now I believed that the performance decrease with apache/mod_jk would be marginal. Putting apache/mod_jk before tomcat is very nice. I don't want to miss it because it is a good way to integrate other modules. Is there any way to speed up apache/tomcat cooperation? Marc [1] (german only) http://www.heise.de/ix/artikel/2005/10/124/ _ FREE pop-up blocking with the new MSN Toolbar - get it now! http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: mod_jk and text/plain
On Wed, Sep 07, 2005 at 06:37:46PM +0300, Eugeny N Dzhurinsky wrote: > I have a problem with the application resources, mapped with the JkMount. For > some reason httpd server threats the content-type as text/plain, and ignores > the text/html set by tomcat. > > any ideas how to get rid of that? > > Tomcat 4.1.31, mod_jk 1.2.14.1, Apache httpd 1.3 > Defaultcontent is commented out in the httpd.conf I added .htaccess file with the DefaultType text/html to the WEB application root, and everything seems to work fine now. Also I have servlet mapping to the /some URI path, and it won't work, but after I created empty file some in the root of WEB application - it start to resolve :) A lot of crutches for simply tasks, huh :) -- Eugene N Dzhurinsky - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
mod_jk and text/plain
I have a problem with the application resources, mapped with the JkMount. For some reason httpd server threats the content-type as text/plain, and ignores the text/html set by tomcat. any ideas how to get rid of that? Tomcat 4.1.31, mod_jk 1.2.14.1, Apache httpd 1.3 Defaultcontent is commented out in the httpd.conf -- Eugene N Dzhurinsky - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Building Mod_jk for HP-UX fails
amber# /home/amaris/ivdmaagden/gmake/bin/make --version GNU Make version 3.79.1, by Richard Stallman and Roland McGrath. Built for hppa2.0w-hp-hpux11.11 Copyright (C) 1988, 89, 90, 91, 92, 93, 94, 95, 96, 97, 98, 99, 2000 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. Report bugs to . And for gcc amber# /usr/local/bin/gcc --version gcc (GCC) 3.3.3 Copyright (C) 2003 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. > -Oorspronkelijk bericht- > Van: David Rees [mailto:[EMAIL PROTECTED] > Verzonden: donderdag 1 september 2005 22:40 > Aan: Tomcat Users List > Onderwerp: Re: Building Mod_jk for HP-UX fails > > On 8/30/05, Ivo Van Den Maagdenberg > <[EMAIL PROTECTED]> > > > After the jk/native/common directory is built, make does seems not > > pass through the jk/native/apache-1.3 directory properly. I would > > appreciate some help in getting make this to work. > > > > > > > Make output below: > > > > Making all in apache-1.3 > > Make: line 23: syntax error. Stop. > > *** Error exit code 1 > > What version of make are you using? Are you using GNU make? > If not, try that. > > -Dave > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > ___ Deze e-mail en alle gekoppelde bestanden zijn officiele documenten van het Gemeentelijk Havenbedrijf Antwerpen en kunnen vertrouwelijke of persoonlijke informatie bevatten. Gelieve de afzender onmiddellijk via e-mail of telefonisch te verwittigen als u deze e-mail per vergissing heeft ontvangen en verwijder vervolgens de e-mail zonder deze te lezen, te reproduceren, te verspreiden of te ontsluiten naar derden. Het Gemeentelijk Havenbedrijf Antwerpen is op geen enkele manier verantwoordelijk voor fouten of onnauwkeurigheden in de inhoud van deze e-mail. Het Gemeentelijk Havenbedrijf Antwerpen kan niet aansprakelijk gesteld worden voor directe of indirecte schade, verlies of ongemak veroorzaakt als gevolg van een onnauwkeurigheid of fout in deze e-mail. --- English Translation: This e-mail and all attached files are official documents of Antwerp Port Authority and may contain confidential or personal information. If you have received this e-mail in error, you are asked to inform the sender by e-mail or telephone immediately, and to remove it from your system without reading or reproducing it or passing it on to other parties. Antwerp Port Authority is in no way responsible for any errors or inaccuracies in the contents of this e-mail, nor can it be held liable for any direct or indirect loss, damage or inconvenience arising from any such errors or inaccuracies. [GHA#Disclaimer] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Building Mod_jk for HP-UX fails
On 8/30/05, Ivo Van Den Maagdenberg <[EMAIL PROTECTED]> > > After the jk/native/common directory is built, make does seems not pass > through the jk/native/apache-1.3 directory properly. I would appreciate > some help in getting make this to work. > > > Make output below: > > Making all in apache-1.3 > Make: line 23: syntax error. Stop. > *** Error exit code 1 What version of make are you using? Are you using GNU make? If not, try that. -Dave - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: mod_jk: Hot Standby and Load Balance
Of course you are right (and for me it seems to be too late today). So I agree: you either find out how to use different jvmRoutes in a single instance or you try to find a workarounf with the domain attribute: If a load balancer does not find a worker with the correct name (=jvmRoute), it will next use a worker whose domain name is equal to the jvmRoute. But this will not be very efficient, because every request will first look for the "correct" worker and only after that check for the domain. Also I'm not sure, how this "second class worker" will behave, if you stopp it with respect to it's redirect etc. attributes. Sorry! > Rainer Jung wrote: >> The balanced workers behind lb1, lb2 etc. are allowed to have the same >> name, because each load balancer has it's own list of balanced workers >> with associated attributes. I expect no problem from a clash of names of >> balanced workers in different balancing workers. > > I must be missing something obvious here. I am with you on the JKMount > part, but I just don't see how the name clash isn't an issue for > worker.properties. Simplifying again ... > > # as per your suggestion ... where "worker1" and "worker2" are jvmRoutes > worker.lb1.balanced_workers=worker1,worker2 > worker.lb2.balanced_workers=worker1,worker2 > > # the balanced workers ... which should they choose ... ? > worker.worker1 (failover version) > worker.worker1 (not failover version) > worker.worker2 (standby version) > worker.worker2 (non-standby version) > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: mod_jk: Hot Standby and Load Balance
Rainer Jung wrote: The balanced workers behind lb1, lb2 etc. are allowed to have the same name, because each load balancer has it's own list of balanced workers with associated attributes. I expect no problem from a clash of names of balanced workers in different balancing workers. I must be missing something obvious here. I am with you on the JKMount part, but I just don't see how the name clash isn't an issue for worker.properties. Simplifying again ... # as per your suggestion ... where "worker1" and "worker2" are jvmRoutes worker.lb1.balanced_workers=worker1,worker2 worker.lb2.balanced_workers=worker1,worker2 # the balanced workers ... which should they choose ... ? worker.worker1 (failover version) worker.worker1 (not failover version) worker.worker2 (standby version) worker.worker2 (non-standby version) - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: mod_jk: Hot Standby and Load Balance
I think having multiple load balancing workers for the same group of target servers is not a problem. You simply define load balancers e.g. lb1, lb2 etc. Which load balancer is chosen is determined by your JkMount directives. So if you have different apps app1, app2 etc. on your tomcats having incompatible balancing requirements you simply use JkMount /app1/* lb1 JkMount /app2/* lb2 etc. The balanced workers behind lb1, lb2 etc. are allowed to have the same name, because each load balancer has it's own list of balanced workers with associated attributes. I expect no problem from a clash of names of balanced workers in different balancing workers. So there would be no need of having multiple jvmRoute for a single tomcat instance. > Well, I was thinking of using something like (truncated for clarity): > > # load balanced > worker.lb_traditional.type=lb > worker.lb_traditional.balance_workers=lb_worker1,lb_worker2 > worker.lb_traditional.sticky_session=true > > # workers 1 and 2 are load balanced > worker.lb_worker1.type=ajp13 > worker.lb_worker1.host=server1 > worker.lb_worker1.domain=theJRMRoute > > worker.lb_worker2.type=ajp13 > worker.lb_worker2.host=server2 > worker.lb_worker2.domain=theJRMRoute > > # standby setup > worker.lb_standby.type=lb > worker.lb_standby.balance_workers=lb_worker3,lb_worker4 > worker.lb_standby.sticky_session=true > > # workers 4 is hot standby for worker 3 > worker.lb_worker3.type=ajp13 > worker.lb_worker3.host=server1 > worker.lb_worker3.domain=theJRMRoute > worker.lb_worker3.redirect=worker4 > > worker.lb_worker4.type=ajp13 > worker.lb_worker4.host=server2 > worker.lb_worker4.domain=theJRMRoute > worker.lb_worker4.disabled=True > > Guernsey, Byron (GE Consumer & Industrial) wrote: >> I believe you can specify the jvmRoute separately by using the domain >> attribute, but I'm not sure I see how this would help? >> >> Byron >> >> >> -Original Message- >> From: Mott Leroy [mailto:[EMAIL PROTECTED] >> Sent: Wednesday, August 31, 2005 11:03 AM >> To: Tomcat Users List >> Subject: mod_jk: Hot Standby and Load Balance >> >> Due to some differences in our applications, some of them can be truly >> load balanced, and some of them really cannot (yet). That is, some of >> our applications can be (and have been) truly load balanced, and others >> need (and only allow) simple failover support ("hot standby"). I noticed >> that workers now support both possibilities (using "disabled" and >> "redirect" flags to support "hot standby"). >> >> What I'd like to do ultimately is have a "hot standby" load balancer and >> as well as a "normal" load balancer, but it doesn't seem like that's >> possible. From what I understand, you can really only have 1 load >> balanced worker per tomcat instance because it must match the jvmRoute >> of that instance -- having one worker that's disabled and one that's not >> doesn't seem possible. >> >> So if I define a load balance worker as: >> >> # traditional load balance worker >> worker.lb_tala_build.type=ajp13 >> worker.lb_tala_build.host=tala >> worker.lb_tala_build.port=8000 >> worker.lb_tala_build.lbfactor=1 >> worker.lb_tala_build.socket_keepalive=1 >> worker.lb_tala_build.recycle_timeout=300 >> >> I cannot really define a second load balanced worker like below (b/c no >> matching jvmRoute) >> >> # a hot standby worker based on the worker above >> worker.lb_tala_build2.type=ajp13 >> worker.lb_tala_build2.host=tala >> worker.lb_tala_build2.port=8000 >> worker.lb_tala_build2.lbfactor=1 >> worker.lb_tala_build2.socket_keepalive=1 >> worker.lb_tala_build2.recycle_timeout=300 >> worker.lb_tala_build2.disabled=True >> >> Is anyone familiar with this setup of have any ideas how it could be >> achieved? (the same problem exists for what would be the "Primary" >> server, as it would need a worker that redirects and one that doesn't) >> >> Ps - >> >> Being able to specify the jvmRoute separately would solve this problem: >> >> worker.lb_tala_build2.jvmRoute=lb_tala_build >> >> >> >> - >> To unsubscribe, e-mail: [EMAIL PROTECTED] >> For additional commands, e-mail: [EMAIL PROTECTED] >> >> >> >> >> - >> To unsubscribe, e-mail: [EMAIL PROTECTED] >> For additional commands, e-mail: [EMAIL PROTECTED] >> >> >> > > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: mod_jk: Hot Standby and Load Balance
Well, I was thinking of using something like (truncated for clarity): # load balanced worker.lb_traditional.type=lb worker.lb_traditional.balance_workers=lb_worker1,lb_worker2 worker.lb_traditional.sticky_session=true # workers 1 and 2 are load balanced worker.lb_worker1.type=ajp13 worker.lb_worker1.host=server1 worker.lb_worker1.domain=theJRMRoute worker.lb_worker2.type=ajp13 worker.lb_worker2.host=server2 worker.lb_worker2.domain=theJRMRoute # standby setup worker.lb_standby.type=lb worker.lb_standby.balance_workers=lb_worker3,lb_worker4 worker.lb_standby.sticky_session=true # workers 4 is hot standby for worker 3 worker.lb_worker3.type=ajp13 worker.lb_worker3.host=server1 worker.lb_worker3.domain=theJRMRoute worker.lb_worker3.redirect=worker4 worker.lb_worker4.type=ajp13 worker.lb_worker4.host=server2 worker.lb_worker4.domain=theJRMRoute worker.lb_worker4.disabled=True Guernsey, Byron (GE Consumer & Industrial) wrote: I believe you can specify the jvmRoute separately by using the domain attribute, but I'm not sure I see how this would help? Byron -Original Message- From: Mott Leroy [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 31, 2005 11:03 AM To: Tomcat Users List Subject: mod_jk: Hot Standby and Load Balance Due to some differences in our applications, some of them can be truly load balanced, and some of them really cannot (yet). That is, some of our applications can be (and have been) truly load balanced, and others need (and only allow) simple failover support ("hot standby"). I noticed that workers now support both possibilities (using "disabled" and "redirect" flags to support "hot standby"). What I'd like to do ultimately is have a "hot standby" load balancer and as well as a "normal" load balancer, but it doesn't seem like that's possible. From what I understand, you can really only have 1 load balanced worker per tomcat instance because it must match the jvmRoute of that instance -- having one worker that's disabled and one that's not doesn't seem possible. So if I define a load balance worker as: # traditional load balance worker worker.lb_tala_build.type=ajp13 worker.lb_tala_build.host=tala worker.lb_tala_build.port=8000 worker.lb_tala_build.lbfactor=1 worker.lb_tala_build.socket_keepalive=1 worker.lb_tala_build.recycle_timeout=300 I cannot really define a second load balanced worker like below (b/c no matching jvmRoute) # a hot standby worker based on the worker above worker.lb_tala_build2.type=ajp13 worker.lb_tala_build2.host=tala worker.lb_tala_build2.port=8000 worker.lb_tala_build2.lbfactor=1 worker.lb_tala_build2.socket_keepalive=1 worker.lb_tala_build2.recycle_timeout=300 worker.lb_tala_build2.disabled=True Is anyone familiar with this setup of have any ideas how it could be achieved? (the same problem exists for what would be the "Primary" server, as it would need a worker that redirects and one that doesn't) Ps - Being able to specify the jvmRoute separately would solve this problem: worker.lb_tala_build2.jvmRoute=lb_tala_build - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: mod_jk: Hot Standby and Load Balance
I believe you can specify the jvmRoute separately by using the domain attribute, but I'm not sure I see how this would help? Byron -Original Message- From: Mott Leroy [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 31, 2005 11:03 AM To: Tomcat Users List Subject: mod_jk: Hot Standby and Load Balance Due to some differences in our applications, some of them can be truly load balanced, and some of them really cannot (yet). That is, some of our applications can be (and have been) truly load balanced, and others need (and only allow) simple failover support ("hot standby"). I noticed that workers now support both possibilities (using "disabled" and "redirect" flags to support "hot standby"). What I'd like to do ultimately is have a "hot standby" load balancer and as well as a "normal" load balancer, but it doesn't seem like that's possible. From what I understand, you can really only have 1 load balanced worker per tomcat instance because it must match the jvmRoute of that instance -- having one worker that's disabled and one that's not doesn't seem possible. So if I define a load balance worker as: # traditional load balance worker worker.lb_tala_build.type=ajp13 worker.lb_tala_build.host=tala worker.lb_tala_build.port=8000 worker.lb_tala_build.lbfactor=1 worker.lb_tala_build.socket_keepalive=1 worker.lb_tala_build.recycle_timeout=300 I cannot really define a second load balanced worker like below (b/c no matching jvmRoute) # a hot standby worker based on the worker above worker.lb_tala_build2.type=ajp13 worker.lb_tala_build2.host=tala worker.lb_tala_build2.port=8000 worker.lb_tala_build2.lbfactor=1 worker.lb_tala_build2.socket_keepalive=1 worker.lb_tala_build2.recycle_timeout=300 worker.lb_tala_build2.disabled=True Is anyone familiar with this setup of have any ideas how it could be achieved? (the same problem exists for what would be the "Primary" server, as it would need a worker that redirects and one that doesn't) Ps - Being able to specify the jvmRoute separately would solve this problem: worker.lb_tala_build2.jvmRoute=lb_tala_build - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
mod_jk: Hot Standby and Load Balance
Due to some differences in our applications, some of them can be truly load balanced, and some of them really cannot (yet). That is, some of our applications can be (and have been) truly load balanced, and others need (and only allow) simple failover support ("hot standby"). I noticed that workers now support both possibilities (using "disabled" and "redirect" flags to support "hot standby"). What I'd like to do ultimately is have a "hot standby" load balancer and as well as a "normal" load balancer, but it doesn't seem like that's possible. From what I understand, you can really only have 1 load balanced worker per tomcat instance because it must match the jvmRoute of that instance -- having one worker that's disabled and one that's not doesn't seem possible. So if I define a load balance worker as: # traditional load balance worker worker.lb_tala_build.type=ajp13 worker.lb_tala_build.host=tala worker.lb_tala_build.port=8000 worker.lb_tala_build.lbfactor=1 worker.lb_tala_build.socket_keepalive=1 worker.lb_tala_build.recycle_timeout=300 I cannot really define a second load balanced worker like below (b/c no matching jvmRoute) # a hot standby worker based on the worker above worker.lb_tala_build2.type=ajp13 worker.lb_tala_build2.host=tala worker.lb_tala_build2.port=8000 worker.lb_tala_build2.lbfactor=1 worker.lb_tala_build2.socket_keepalive=1 worker.lb_tala_build2.recycle_timeout=300 worker.lb_tala_build2.disabled=True Is anyone familiar with this setup of have any ideas how it could be achieved? (the same problem exists for what would be the "Primary" server, as it would need a worker that redirects and one that doesn't) Ps - Being able to specify the jvmRoute separately would solve this problem: worker.lb_tala_build2.jvmRoute=lb_tala_build - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Building Mod_jk for HP-UX fails
Hi, An HP-UX 11.11 build for mod_jk seems to be missing from http://www.apache.org/dist/jakarta/tomcat-connectors/jk/binaries/ I have attempted to compile mod_jk 1.2.14-1 myself. Apache 1.3.29 is my target. After the jk/native/common directory is built, make does seems not pass through the jk/native/apache-1.3 directory properly. I would appreciate some help in getting make this to work. First 25 lines of Makefile: ## configure should make the Makefile out of this file. srcdir=. top_srcdir=.. APXS=/usr/local/apache/bin/apxs OS= JAVA_HOME= CP=/usr/bin/cp APACHE_DIR=/usr/local/apache MKDIR=/usr/bin/mkdir DESTDIR=/usr/local/apache LIBTOOL=$(SHELL) $(top_builddir)/libtool CP=/usr/bin/cp CC=/usr/local/bin/gcc top_builddir=.. OEXT=.lo libexecdir=${APACHE_DIR}/libexec JK_DIR := .. BUILD_DIR = ${JK_DIR}/../build/jk/apache13 APACHE_FILES = Makefile.tmpl Makefile.libdir libjk.module Make output below: Making all in apache-1.3 Make: line 23: syntax error. Stop. *** Error exit code 1 ___ Deze e-mail en alle gekoppelde bestanden zijn officiele documenten van het Gemeentelijk Havenbedrijf Antwerpen en kunnen vertrouwelijke of persoonlijke informatie bevatten. Gelieve de afzender onmiddellijk via e-mail of telefonisch te verwittigen als u deze e-mail per vergissing heeft ontvangen en verwijder vervolgens de e-mail zonder deze te lezen, te reproduceren, te verspreiden of te ontsluiten naar derden. Het Gemeentelijk Havenbedrijf Antwerpen is op geen enkele manier verantwoordelijk voor fouten of onnauwkeurigheden in de inhoud van deze e-mail. Het Gemeentelijk Havenbedrijf Antwerpen kan niet aansprakelijk gesteld worden voor directe of indirecte schade, verlies of ongemak veroorzaakt als gevolg van een onnauwkeurigheid of fout in deze e-mail. --- English Translation: This e-mail and all attached files are official documents of Antwerp Port Authority and may contain confidential or personal information. If you have received this e-mail in error, you are asked to inform the sender by e-mail or telephone immediately, and to remove it from your system without reading or reproducing it or passing it on to other parties. Antwerp Port Authority is in no way responsible for any errors or inaccuracies in the contents of this e-mail, nor can it be held liable for any direct or indirect loss, damage or inconvenience arising from any such errors or inaccuracies. [GHA#Disclaimer]
Loadbalancing issues with mod_jk 1.2.14
I tried to upgrade from 1.2.8 to 1.2.14 this week. I must say that the behavior of mod_jk has changed quite a bit. Especially troublesome is that the LB seems less equally distributing in 1.2.14 than it was in 1.2.8. Essentilly I experienced some Tomcats die under the load while others where bored. I know there are new settings in 1.2.14 for loadbalancing, namely lock and method. Can someone advise me which combination of flags would best recreate the loadbalancing as it was under 1.2.8? It is not that I want to stay on 1.2.8 but at this point I can't get 1.2.14 to run stable enough under high load. Thanks, Andreas - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: mod_jk Apache Permission Problem
On Aug 18, 2005, at 5:45 PM, Kyle wrote: I dunno if it's the same in Apache 1.3, but in Apache 2.x the example httpd.conf file has a pair of small tags showing how to run Apache under non-root user for diff. OS's. Basically you have to start Apache as root and it will then switch over, or so the example file says. To do this irrespecitve of the modules being present or otherwise, I just deleted the Tags. Kyle, Thanks for the hint! I changed the user from 'nobody' to 'www', and it now works. Awesome! Thanks a million! Cheers, Jeshua Lacock ___ Programmer/OwnerPhone: 877.240.1364 http://OpenOSX.com Fax:415.462.6211 -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: mod_jk Apache Permission Problem
I dunno if it's the same in Apache 1.3, but in Apache 2.x the example httpd.conf file has a pair of small tags showing how to run Apache under non-root user for diff. OS's. Basically you have to start Apache as root and it will then switch over, or so the example file says. To do this irrespecitve of the modules being present or otherwise, I just deleted the Tags. K Jeshua Lacock wrote: Greetings, I can't seem to make mod_jk connect successfully with Apache. Apache and Tomcat both works fine on their own (apache on :80 Tomcat on :8080), but I seem to be getting a permissions problem using mod_jk. I am able start Tomcat without special privileges, but when I try and start Apache as a non-privileged user (after starting Tomcat), I get the following error: - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
mod_jk Apache Permission Problem
Greetings, I can't seem to make mod_jk connect successfully with Apache. Apache and Tomcat both works fine on their own (apache on :80 Tomcat on :8080), but I seem to be getting a permissions problem using mod_jk. I am able start Tomcat without special privileges, but when I try and start Apache as a non-privileged user (after starting Tomcat), I get the following error: (13)Permission denied: make_sock: could not bind to address [::]:80 no listening sockets available, shutting down Ideally I would like to be able to run both as a non-privileged user. At any rate, if I either start both as root, or start Tomcat unprivileged and Apache with privileges, I end up getting the same error in the Apache 2 log: [Thu Aug 18 06:29:18 2005] [error] (13)Permission denied: apr_global_mutex_lock(jk_log_lock) failed [Thu Aug 18 06:29:19 2005] [notice] child pid 14821 exit signal Bus error (10) It is strange because, my user account owns all of the files (I used chown -R to make sure). I have also tried running it as the root user with the same error, and changing all files to be owned by root. I have read and followed available instructions to the best of my ability. Any ideas? It seems like a simple permission problem, but I am not sure what might need special permissions. Here is my Tomcat's startup information: Using CATALINA_BASE: /tmp/OpenOSX/OpenWeb/jakarta-tomcat-4.1.31 Using CATALINA_HOME: /tmp/OpenOSX/OpenWeb/jakarta-tomcat-4.1.31 Using CATALINA_TMPDIR: /tmp/OpenOSX/OpenWeb/jakarta-tomcat-4.1.31/temp Using JAVA_HOME: /Library/Java/Home Aug 18, 2005 6:28:40 AM org.apache.coyote.http11.Http11Protocol init INFO: Initializing Coyote HTTP/1.1 on http-8080 Starting service Tomcat-Standalone Apache Tomcat/4.1.31 Aug 18, 2005 6:28:44 AM org.apache.struts.util.PropertyMessageResources INFO: Initializing, config='org.apache.struts.util.LocalStrings', returnNull=true Aug 18, 2005 6:28:44 AM org.apache.struts.util.PropertyMessageResources INFO: Initializing, config='org.apache.struts.action.ActionResources', returnNull=true Aug 18, 2005 6:28:45 AM org.apache.struts.util.PropertyMessageResources INFO: Initializing, config='org.apache.webapp.admin.ApplicationResources', returnNull=true Aug 18, 2005 6:28:53 AM org.apache.coyote.http11.Http11Protocol start INFO: Starting Coyote HTTP/1.1 on http-8080 Aug 18, 2005 6:28:53 AM org.apache.jk.common.ChannelSocket init INFO: JK2: ajp13 listening on /0.0.0.0:8009 Aug 18, 2005 6:28:53 AM org.apache.jk.server.JkMain start INFO: Jk running ID=0 time=1/68 config=/tmp/OpenOSX/OpenWeb/jakarta-tomcat-4.1.31/conf/jk2.properties ^CStopping service Tomcat-Standalone Here is the pertinent mod_jk configuration from the httpd.conf: LoadModule jk_module modules/mod_jk.so JkWorkersFile /tmp/OpenOSX/OpenWeb//jakarta-tomcat-4.1.31/conf/workers.properties JkLogFile /tmp/OpenOSX/OpenWeb/apache2/logs/mod_jk.log JkLogLeveldebug DocumentRoot /tmp/OpenOSX/OpenWeb//jakarta-tomcat-4.1.31/webapps ServerName localhost JkMount /*.jsp ajp13 JkMount /examples/servlet/* ajp13 My workers.properties file: workers.tomcat_home=/tmp/OpenOSX/OpenWeb/jakarta-tomcat-4.1.31 workers.java_home=/Library/Java/Home ps=/ worker.list=ajp12, ajp13 worker.ajp13.port=8009 worker.ajp13.host=127.0.0.1 worker.ajp12.type=ajp13 I am running Apache/2.0.54 (Unix) DAV/2 PHP/5.0.4 mod_jk/1.2.14 mod_ssl/2.0.54 OpenSSL/0.9.7b on Mac OS X 10.3.9, built from source. Any hints/help would be GREATLY appreciated. I am willing to compensate for time. Thanks, Jeshua Lacock ___ Programmer/OwnerPhone: 877.240.1364 http://OpenOSX.com Fax:415.462.6211 -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: session problems when using mod_jk (1.2.14) load balancing
OK, thanks Mladen: I have to correct myself. 1) Traditional use Until mod_jk 1.2.6 there was no concept of domains. You had to specify the worker name to be exactly the same as the jvmRoute to make sticky sessions work. This way of configuring stickyness is wel known to mod_jk users. 2) I introduced domains to allow mod_jk to make good failover decisions in the case where you have many tomcats, but session replication only between subset, like 2 Tomcat clusters with three instances each (T1_1, T1_2, ..., T3_3) where T1_1, T1_2 and T1_3 replicate their sessions between each other etc. Then you can configure a common domain name for T1_1, T1_2 and T1_3 (e.g. T1) and is mod_jk is not able to correctly route a sticky request (e.g. T1_1 goes down) it will choose another worker with the same domain name. Moreover in this case it will load balance betweeen all those workers (in my example between T1_2 and T1_3). 1) and 2) still work in 1.2.14. 3) Mladen improved mod_jk a lot and during that time introduced another additional way of using the domain attribute: If stickyness for sessions is required and mod_jk does not find a worker with the name of the jvmRoute contained in the session id, then it will next try to find any worker whose domain name is equal to the jvmRoute. If there are multiple such workers, mod_jk loadbalances between them. Summary: If there is a one-to-one relationship between jvmRoutes and workers, there is no functional difference between giving the worker the same name as the jvmRoute, or giving it the same domain attribute as the jvmRoute. The first way is more compatible with what people used to do since a long time and it will be marginally faster, because that check is done first. It's always good to look at the code, in fact when I first discovered the use of the jvmRoute as a domain name in the code I thought it's a bug. I now understand, that it's at least a feature :-) > Hi Mladen, > > I've used the domain property because it seemed the more general > approach (i.e., supports clusters but can be used with a single worker). > What this thread got me curious about is if using the domain property in > this fashion is "officially" supported, or on the other hand if it can > only be used reliably with clusters. > > After reading the documentation > (http://jakarta.apache.org/tomcat/connectors-doc/config/workers.html), I > got the idea that using the domain property with only one worker > wouldn't be a trick but another way tell mod_jk which jvmRoute to use: > "If sticky_session is used, then the domain name is used as session > route.". Naming the worker after the intended jvmRoute (even though it > used to be the only way) seems more of a trick than explicitly > specifying the jvmRoute with the domain property. > > However, since the same documention mentions that the domain property > is used for large systems with clustering, do you know of any side > effects (like lower performance) of using this approach as opposed to > simply naming the workers after the jvmRoute? > > -- Edgar Alves > > Mladen Turk wrote: > >> Edgar Alves wrote: >> >>> Hi, >>> I'm using the domain property in the same situation as the one >>> discussed in this thread. Any reason why I shouldn't use the domain >>> property and rely on the worker names instead? >> >> >> Domain is supposed to be used with multiple workers sharing the >> same jvmRoute having session replication between them, thus >> forming 'cluster groups' to lower the session data replication >> transfer. >> >> You can use the domain, but it's a trick rather then a proper >> usage. >> >> Regards, >> Mladen. > > > > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: session problems when using mod_jk (1.2.14) load balancing
Hi Mladen, I've used the domain property because it seemed the more general approach (i.e., supports clusters but can be used with a single worker). What this thread got me curious about is if using the domain property in this fashion is "officially" supported, or on the other hand if it can only be used reliably with clusters. After reading the documentation (http://jakarta.apache.org/tomcat/connectors-doc/config/workers.html), I got the idea that using the domain property with only one worker wouldn't be a trick but another way tell mod_jk which jvmRoute to use: "If sticky_session is used, then the domain name is used as session route.". Naming the worker after the intended jvmRoute (even though it used to be the only way) seems more of a trick than explicitly specifying the jvmRoute with the domain property. However, since the same documention mentions that the domain property is used for large systems with clustering, do you know of any side effects (like lower performance) of using this approach as opposed to simply naming the workers after the jvmRoute? -- Edgar Alves Mladen Turk wrote: > Edgar Alves wrote: > >> Hi, >> I'm using the domain property in the same situation as the one >> discussed in this thread. Any reason why I shouldn't use the domain >> property and rely on the worker names instead? > > > Domain is supposed to be used with multiple workers sharing the > same jvmRoute having session replication between them, thus > forming 'cluster groups' to lower the session data replication > transfer. > > You can use the domain, but it's a trick rather then a proper > usage. > > Regards, > Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: session problems when using mod_jk (1.2.14) load balancing
Edgar Alves wrote: Hi, I'm using the domain property in the same situation as the one discussed in this thread. Any reason why I shouldn't use the domain property and rely on the worker names instead? Domain is supposed to be used with multiple workers sharing the same jvmRoute having session replication between them, thus forming 'cluster groups' to lower the session data replication transfer. You can use the domain, but it's a trick rather then a proper usage. Regards, Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: session problems when using mod_jk (1.2.14) load balancing
Hi, I'm using the domain property in the same situation as the one discussed in this thread. Any reason why I shouldn't use the domain property and rely on the worker names instead? Thanks in advance, -- Edgar Alves Rainer Jung wrote: >That should not work! > >The correct way to configure session stickyness is to use jvmRoute (which >you already did) and then giving the workers the same names as the >jvmRoute. That is instead of "bl_worker_dev" use "dev_alexis" and instead >of "bl_worker_noah" use "noah_alexis" as the worker names. > >You should check, that the URLs produced by your application include the >";jsessionid=<32Characters>." or - in case you use cookies - the >same info is in your session cookie. > >mod_jk then automatically strips the part from the session >identifier and lloks for a worker of the same name. > >You will only need to use the domain attribute in case you have a lot of >tomcat instances and some of them have the sessions replicated, others >not. Then you can give all members of a replication domain the same domain >name and mod_jk will know, that in case the correct worker is down, which >alternatives are good. > > > >>Beautiful - worked like a charm. That might take the cake as far as >>longest question to quickest, shortest answer goes. ha. Thanks a bunch. >> >>I might have to gripe about doucmentation in a second (nother thread).. >> >>Noah >> >> >>Edgar Alves wrote: >> >> >>>Try adding these two lines to worker.properties: >>>worker.bl_worker_dev.domain=dev_alexis >>>worker.bl_worker_noah.domain=noah_alexis >>> >>>-- Edgar Alves >>> >>> - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Apache2...TC4.1.30...mod_jk odd behavior
Hello I am getting odd behavior w/TC4.1.30 and the configurations below. www.vhost01.com & www.vhost01.com/hello.jsp work and as expected www.vhost02.com & www.vhost02.com/sb/hello.jsp work NOT as expected. As implied in the server.xml snipette the tomcat serving directory is the typical /webapps/op for vhost01 & /webapps/sb for vhost02. (Its a perverse mgt story why they are not vhost01 & vhost02). The configs are, afaiks, identical parameterized as needed. www.vhost02.com/hello.jsp should work. Ideas? tia httpd.conf ServerName www.vhost01.com ServerAdmin [EMAIL PROTECTED] DocumentRoot D:/Projects01/vhost01/site ErrorLog D:/Projects01/vhost01/logs/error_log CustomLog D:/Projects01/vhost01/logs/access_log common JkMount /*.jsp connect_cp JkMount /servlet/* connect_cp ServerName www.vhost02.com ServerAdmin [EMAIL PROTECTED] DocumentRoot D:/Projects01/vhost02/site ErrorLog D:/Projects01/vhost02/logs/error_log CustomLog D:/Projects01/vhost02/logs/access_log common JkMount /*.jsp connect_sb JkMount /servlet/* connect_sb server.xml properties workers.tomcat_home E:\Program Files\Tomcat 4.1 workers.java_home=$JAVA_HOME ps\ worker.list=ajp12, ajp13, connect_cp, connect_sb worker.connect_cp.port=8009 worker.connect_cp.host=www.vhost01.com worker.connect_cp.type=ajp13 worker.connect_sb.port=8009 worker.connect_sb.host=www.vhost02.com worker.connect_sb.type=ajp13 __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: session problems when using mod_jk (1.2.14) load balancing
Ok - noted. I changed it. It works without the domain as you noted. Thanks. Rainer Jung wrote: That should not work! The correct way to configure session stickyness is to use jvmRoute (which you already did) and then giving the workers the same names as the jvmRoute. That is instead of "bl_worker_dev" use "dev_alexis" and instead of "bl_worker_noah" use "noah_alexis" as the worker names. You should check, that the URLs produced by your application include the ";jsessionid=<32Characters>." or - in case you use cookies - the same info is in your session cookie. mod_jk then automatically strips the part from the session identifier and lloks for a worker of the same name. You will only need to use the domain attribute in case you have a lot of tomcat instances and some of them have the sessions replicated, others not. Then you can give all members of a replication domain the same domain name and mod_jk will know, that in case the correct worker is down, which alternatives are good. Beautiful - worked like a charm. That might take the cake as far as longest question to quickest, shortest answer goes. ha. Thanks a bunch. I might have to gripe about doucmentation in a second (nother thread).. Noah Edgar Alves wrote: Try adding these two lines to worker.properties: worker.bl_worker_dev.domain=dev_alexis worker.bl_worker_noah.domain=noah_alexis -- Edgar Alves Mott Leroy wrote: Hi - I'm unable to get mod_jk load balancing working. The usual mod_jk setup works just fine, but using a load balancing worker however, is not. [Oddly, my webserver crashed during testing of this, but that could very well be unrelated] The problem is with user sessions. The instances (nodes) do not seem to recognize an already established session with the user and are creating new sessions. It's possible that is a "session-stickiness" issue, but it appears like the requests are hitting the same instance, just not getting the previously established session. As a result, I can't even reliably login to my application. I created a session listener for debugging purposes and it reports -no- destroyed sessions, but plenty of newly created sessions on both instances that make up the "cluster". The session IDs, I noticed, have the jvmRoute name attached to them, which should be a good sign. I have a webserver running Apache (1.3.33), mod_jk (1.2.14), and an application server running the "cluster" -- 2 instances tomcat (5.0.28) on different ports. I added a unique jvmRoute to both instances in the server.xml: My worker.properties loadbalancer settings: worker.list=load_balancer_test worker.load_balancer_test.type=lb worker.load_balancer_test.balance_workers=bl_worker_dev,bl_worker_noah worker.load_balancer_test.sticky_session=true worker.load_balancer_test.sticky_session_force=false worker.bl_worker_dev.type=ajp13 worker.bl_worker_dev.host=alexis worker.bl_worker_dev.port=9003 worker.bl_worker_dev.lbfactor=1 worker.bl_worker_dev.socket_keepalive=1 worker.bl_worker_dev.recycle_timeout=300 worker.bl_worker_noah.type=ajp13 worker.bl_worker_noah.host=alexis worker.bl_worker_noah.port=8063 worker.bl_worker_noah.lbfactor=3 worker.bl_worker_noah.socket_keepalive=1 worker.bl_worker_noah.recycle_timeout=300 Any ideas, things I could try would be much appreciated. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: session problems when using mod_jk (1.2.14) load balancing
That should not work! The correct way to configure session stickyness is to use jvmRoute (which you already did) and then giving the workers the same names as the jvmRoute. That is instead of "bl_worker_dev" use "dev_alexis" and instead of "bl_worker_noah" use "noah_alexis" as the worker names. You should check, that the URLs produced by your application include the ";jsessionid=<32Characters>." or - in case you use cookies - the same info is in your session cookie. mod_jk then automatically strips the part from the session identifier and lloks for a worker of the same name. You will only need to use the domain attribute in case you have a lot of tomcat instances and some of them have the sessions replicated, others not. Then you can give all members of a replication domain the same domain name and mod_jk will know, that in case the correct worker is down, which alternatives are good. > Beautiful - worked like a charm. That might take the cake as far as > longest question to quickest, shortest answer goes. ha. Thanks a bunch. > > I might have to gripe about doucmentation in a second (nother thread).. > > Noah > > > Edgar Alves wrote: >> Try adding these two lines to worker.properties: >> worker.bl_worker_dev.domain=dev_alexis >> worker.bl_worker_noah.domain=noah_alexis >> >> -- Edgar Alves >> >> Mott Leroy wrote: >> >> >>>Hi - >>> >>>I'm unable to get mod_jk load balancing working. The usual mod_jk >>>setup works just fine, but using a load balancing worker however, is >>>not. [Oddly, my webserver crashed during testing of this, but that >>>could very well be unrelated] >>> >>>The problem is with user sessions. The instances (nodes) do not seem >>>to recognize an already established session with the user and are >>>creating new sessions. It's possible that is a "session-stickiness" >>>issue, but it appears like the requests are hitting the same instance, >>>just not getting the previously established session. As a result, I >>>can't even reliably login to my application. >>> >>>I created a session listener for debugging purposes and it reports >>>-no- destroyed sessions, but plenty of newly created sessions on both >>>instances that make up the "cluster". The session IDs, I noticed, have >>>the jvmRoute name attached to them, which should be a good sign. >>> >>>I have a webserver running Apache (1.3.33), mod_jk (1.2.14), and an >>>application server running the "cluster" -- 2 instances tomcat >>>(5.0.28) on different ports. >>> >>>I added a unique jvmRoute to both instances in the server.xml: >>> >>> >>> >>>My worker.properties loadbalancer settings: >>> >>>worker.list=load_balancer_test >>> >>>worker.load_balancer_test.type=lb >>>worker.load_balancer_test.balance_workers=bl_worker_dev,bl_worker_noah >>>worker.load_balancer_test.sticky_session=true >>>worker.load_balancer_test.sticky_session_force=false >>> >>>worker.bl_worker_dev.type=ajp13 >>>worker.bl_worker_dev.host=alexis >>>worker.bl_worker_dev.port=9003 >>>worker.bl_worker_dev.lbfactor=1 >>>worker.bl_worker_dev.socket_keepalive=1 >>>worker.bl_worker_dev.recycle_timeout=300 >>> >>>worker.bl_worker_noah.type=ajp13 >>>worker.bl_worker_noah.host=alexis >>>worker.bl_worker_noah.port=8063 >>>worker.bl_worker_noah.lbfactor=3 >>>worker.bl_worker_noah.socket_keepalive=1 >>>worker.bl_worker_noah.recycle_timeout=300 >>> >>>Any ideas, things I could try would be much appreciated. >>> >>>- >>>To unsubscribe, e-mail: [EMAIL PROTECTED] >>>For additional commands, e-mail: [EMAIL PROTECTED] >>> >>> >>> >>> >> >> >> >> >> - >> To unsubscribe, e-mail: [EMAIL PROTECTED] >> For additional commands, e-mail: [EMAIL PROTECTED] >> >> >> > > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
mod_jk documentation
Before I go gripe too, too much, let me just say that the mod_jk documentation has improved immensely since I start looking into it. Some of it might be simplied by the fact that I no longer consider jk2 in the picture which seemed to be adding some confusion. I don't know who is responsible for updating the documentation, so thought I'd post here. The documentation that I'm referring to is at: http://jakarta.apache.org/tomcat/connectors-doc/index.html load balancing page: Well, the load balancing page is empty, which is ok, but a link to the majority of load balancing explanation on the worker.properties page would be nice. "domain" property for a worker. I had to use the "domain" property on a worker to get load balancing working, which corresponds to the jvmRoute. I didn't see any mention of jvmRoute or "domain" anywhere however in either the load balancing section or the general worker properties. finally, and this may have annoyed me more than anything else - all throughout the load balancing documentation there are red, bolded lines like "These workers should not appear in the worker.list property!" in reference to "balance_workers". But then in the example, they do exactly what they said should NOT be done: (bottom of this page) http://jakarta.apache.org/tomcat/connectors-doc/howto/workers.html - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: session problems when using mod_jk (1.2.14) load balancing
Beautiful - worked like a charm. That might take the cake as far as longest question to quickest, shortest answer goes. ha. Thanks a bunch. I might have to gripe about doucmentation in a second (nother thread).. Noah Edgar Alves wrote: Try adding these two lines to worker.properties: worker.bl_worker_dev.domain=dev_alexis worker.bl_worker_noah.domain=noah_alexis -- Edgar Alves Mott Leroy wrote: Hi - I'm unable to get mod_jk load balancing working. The usual mod_jk setup works just fine, but using a load balancing worker however, is not. [Oddly, my webserver crashed during testing of this, but that could very well be unrelated] The problem is with user sessions. The instances (nodes) do not seem to recognize an already established session with the user and are creating new sessions. It's possible that is a "session-stickiness" issue, but it appears like the requests are hitting the same instance, just not getting the previously established session. As a result, I can't even reliably login to my application. I created a session listener for debugging purposes and it reports -no- destroyed sessions, but plenty of newly created sessions on both instances that make up the "cluster". The session IDs, I noticed, have the jvmRoute name attached to them, which should be a good sign. I have a webserver running Apache (1.3.33), mod_jk (1.2.14), and an application server running the "cluster" -- 2 instances tomcat (5.0.28) on different ports. I added a unique jvmRoute to both instances in the server.xml: My worker.properties loadbalancer settings: worker.list=load_balancer_test worker.load_balancer_test.type=lb worker.load_balancer_test.balance_workers=bl_worker_dev,bl_worker_noah worker.load_balancer_test.sticky_session=true worker.load_balancer_test.sticky_session_force=false worker.bl_worker_dev.type=ajp13 worker.bl_worker_dev.host=alexis worker.bl_worker_dev.port=9003 worker.bl_worker_dev.lbfactor=1 worker.bl_worker_dev.socket_keepalive=1 worker.bl_worker_dev.recycle_timeout=300 worker.bl_worker_noah.type=ajp13 worker.bl_worker_noah.host=alexis worker.bl_worker_noah.port=8063 worker.bl_worker_noah.lbfactor=3 worker.bl_worker_noah.socket_keepalive=1 worker.bl_worker_noah.recycle_timeout=300 Any ideas, things I could try would be much appreciated. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: session problems when using mod_jk (1.2.14) load balancing
Try adding these two lines to worker.properties: worker.bl_worker_dev.domain=dev_alexis worker.bl_worker_noah.domain=noah_alexis -- Edgar Alves Mott Leroy wrote: > Hi - > > I'm unable to get mod_jk load balancing working. The usual mod_jk > setup works just fine, but using a load balancing worker however, is > not. [Oddly, my webserver crashed during testing of this, but that > could very well be unrelated] > > The problem is with user sessions. The instances (nodes) do not seem > to recognize an already established session with the user and are > creating new sessions. It's possible that is a "session-stickiness" > issue, but it appears like the requests are hitting the same instance, > just not getting the previously established session. As a result, I > can't even reliably login to my application. > > I created a session listener for debugging purposes and it reports > -no- destroyed sessions, but plenty of newly created sessions on both > instances that make up the "cluster". The session IDs, I noticed, have > the jvmRoute name attached to them, which should be a good sign. > > I have a webserver running Apache (1.3.33), mod_jk (1.2.14), and an > application server running the "cluster" -- 2 instances tomcat > (5.0.28) on different ports. > > I added a unique jvmRoute to both instances in the server.xml: > > > > My worker.properties loadbalancer settings: > > worker.list=load_balancer_test > > worker.load_balancer_test.type=lb > worker.load_balancer_test.balance_workers=bl_worker_dev,bl_worker_noah > worker.load_balancer_test.sticky_session=true > worker.load_balancer_test.sticky_session_force=false > > worker.bl_worker_dev.type=ajp13 > worker.bl_worker_dev.host=alexis > worker.bl_worker_dev.port=9003 > worker.bl_worker_dev.lbfactor=1 > worker.bl_worker_dev.socket_keepalive=1 > worker.bl_worker_dev.recycle_timeout=300 > > worker.bl_worker_noah.type=ajp13 > worker.bl_worker_noah.host=alexis > worker.bl_worker_noah.port=8063 > worker.bl_worker_noah.lbfactor=3 > worker.bl_worker_noah.socket_keepalive=1 > worker.bl_worker_noah.recycle_timeout=300 > > Any ideas, things I could try would be much appreciated. > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > > > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
session problems when using mod_jk (1.2.14) load balancing
Hi - I'm unable to get mod_jk load balancing working. The usual mod_jk setup works just fine, but using a load balancing worker however, is not. [Oddly, my webserver crashed during testing of this, but that could very well be unrelated] The problem is with user sessions. The instances (nodes) do not seem to recognize an already established session with the user and are creating new sessions. It's possible that is a "session-stickiness" issue, but it appears like the requests are hitting the same instance, just not getting the previously established session. As a result, I can't even reliably login to my application. I created a session listener for debugging purposes and it reports -no- destroyed sessions, but plenty of newly created sessions on both instances that make up the "cluster". The session IDs, I noticed, have the jvmRoute name attached to them, which should be a good sign. I have a webserver running Apache (1.3.33), mod_jk (1.2.14), and an application server running the "cluster" -- 2 instances tomcat (5.0.28) on different ports. I added a unique jvmRoute to both instances in the server.xml: My worker.properties loadbalancer settings: worker.list=load_balancer_test worker.load_balancer_test.type=lb worker.load_balancer_test.balance_workers=bl_worker_dev,bl_worker_noah worker.load_balancer_test.sticky_session=true worker.load_balancer_test.sticky_session_force=false worker.bl_worker_dev.type=ajp13 worker.bl_worker_dev.host=alexis worker.bl_worker_dev.port=9003 worker.bl_worker_dev.lbfactor=1 worker.bl_worker_dev.socket_keepalive=1 worker.bl_worker_dev.recycle_timeout=300 worker.bl_worker_noah.type=ajp13 worker.bl_worker_noah.host=alexis worker.bl_worker_noah.port=8063 worker.bl_worker_noah.lbfactor=3 worker.bl_worker_noah.socket_keepalive=1 worker.bl_worker_noah.recycle_timeout=300 Any ideas, things I could try would be much appreciated. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Performance proxy_ajp vs. mod_jk when TOMCAT integration with Apache
proxy_ajp is mod_jk successor in Apache2.1/2.2 core. You can find more info: http://httpd.apache.org/docs-2.1/mod/mod_proxy.html http://httpd.apache.org/docs-2.1/mod/mod_proxy_ajp.html http://httpd.apache.org/docs-2.1/mod/mod_proxy_balancer.html Thx, Xuekun On 8/17/05, Christine Ho <[EMAIL PROTECTED]> wrote: > Hi, > Can somebody tell me what the difference between > the proxy_ajp and mod_jk is. > > thanks, > Christine - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Performance proxy_ajp vs. mod_jk when TOMCAT integration with Apache
Hi, Can somebody tell me what the difference between the proxy_ajp and mod_jk is. thanks, Christine --- Mladen Turk <[EMAIL PROTECTED]> wrote: > Xuekun Hu wrote: > > Hi, > >>From performance point, which connector will be > used for TOMCAT > > intergration with Apache? proxy_ajp or mod_jk? > > > > I read some docs which said mod_jk should have > better performance than > > proxying. While proxy_ajp in Apache2.1 is an > addition to the mod_proxy > > and uses Tomcat's AJP protocol stack. So I ask the > upper question. > > > > Right, both mod_jk and proxy_ajp have almost the > same performance, > and they are up to twice as fast compared with http > mostly because > of constant connection pool. AJP protocol gives it's > share too > by transferring less data across the wire. > > If you are using Apache 2.1+ there is no need to use > mod_jk and > maintain additional module. > > Regards, > Mladen. > > - > To unsubscribe, e-mail: > [EMAIL PROTECTED] > For additional commands, e-mail: > [EMAIL PROTECTED] > > __ Do you Yahoo!? Yahoo! Mail - You care about security. So do we. http://promotions.yahoo.com/new_mail - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Performance proxy_ajp vs. mod_jk when TOMCAT integration with Apache
Xuekun Hu wrote: Hi, From performance point, which connector will be used for TOMCAT intergration with Apache? proxy_ajp or mod_jk? I read some docs which said mod_jk should have better performance than proxying. While proxy_ajp in Apache2.1 is an addition to the mod_proxy and uses Tomcat's AJP protocol stack. So I ask the upper question. Right, both mod_jk and proxy_ajp have almost the same performance, and they are up to twice as fast compared with http mostly because of constant connection pool. AJP protocol gives it's share too by transferring less data across the wire. If you are using Apache 2.1+ there is no need to use mod_jk and maintain additional module. Regards, Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Performance proxy_ajp vs. mod_jk when TOMCAT integration with Apache
Hi, >From performance point, which connector will be used for TOMCAT intergration with Apache? proxy_ajp or mod_jk? I read some docs which said mod_jk should have better performance than proxying. While proxy_ajp in Apache2.1 is an addition to the mod_proxy and uses Tomcat's AJP protocol stack. So I ask the upper question. Thx, Xuekun - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Apache + Tomcat + Mod_JK + SSL How to?
Hi, I've been following this thread for a bit and can offer some of my painfully gained insights. I have Apache, tomcat 5.0.28, mod_jk and SSL. This is not a real fix, just my workarounds. It drove me nuts forever until I figured out that Apache webserver does not successful apply rewrite rules to the JkMount directive. In my httpd.conf: #tomcat worker JkWorkersFile "conf/workers.properties" JkLogFile "logs/jk.log" JkLogLevel info JkMount /*.jsp jkworker Under my virtual host port 80 I tested a few rewrite rules(the first was to the 'admin' directory, the second was for all requests): RewriteRule ^/admin/(.*)$ https://server.name.com/$1 [R] RewriteRule ^.*$ https://server.name.com%{REQUEST_URI} [R] The rewrite would work for non JkMount items, but the behavior seemed to show apache just handing off the transaction to tomcat via the mount BEFORE applying the rewrite. (please check this for yourself, if you use a rewrite rule to a non JkMount directory Apache should redirect it successfully) Tomcat would not bounce it to port 443 because the rewrite rule was not in the tomcat layer. Our java programer ended up writing a custom jsp that redirected the transaction to a SSL port. I then made the redirect directory forbidden under non-SSL. I suspect there maybe a more graceful way to do this please let me know if you find it. -Kiarna
Re: Apache + Tomcat + Mod_JK + SSL How to? Got it.
It was something simple. I didn't have to mod_jk directive setup on the virtual host with ssl. Stanczak Group wrote: Mladen Turk wrote: Stanczak Group wrote: I'm not familiar with mod_jk, but in Tomcat when using SSL I can put in a security constraint and it will redirect to a secure connection, so that's why I'm making it sound like a redirect. Hmm. You are still unclear. Seems to me that you are saying that you can access your application with http via mod_jk but not via https, and you can access jsp-examples both with http and https? Is this correct? Also, adjust your clock. That fix it? I didn't even see it was off. Regards, Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- Justin Stanczak Stanczak Group 812-735-3600 "All that is necessary for the triumph of evil is that good men do nothing." Edmund Burke .....__. ./ _/....._/..|_..... /...\../.__.\./\...__\/.._.\./._..\ \\_\..\..___/|...|..\..|.(..<_>.|.<_>..) .\__../\___.._\__|../__|..\/.\/.. \/.\/.\/.. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Apache + Tomcat + Mod_JK + SSL How to?
Mladen Turk wrote: Stanczak Group wrote: I'm not familiar with mod_jk, but in Tomcat when using SSL I can put in a security constraint and it will redirect to a secure connection, so that's why I'm making it sound like a redirect. Hmm. You are still unclear. Seems to me that you are saying that you can access your application with http via mod_jk but not via https, and you can access jsp-examples both with http and https? Is this correct? Also, adjust your clock. That fix it? I didn't even see it was off. Regards, Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- Justin Stanczak Stanczak Group 812-735-3600 "All that is necessary for the triumph of evil is that good men do nothing." Edmund Burke .....__. ./ _/....._/..|_..... /...\../.__.\./\...__\/.._.\./._..\ \\_\..\..___/|...|..\..|.(..<_>.|.<_>..) .\__../\___.._\__|../__|..\/.\/.. \/.\/.\/.. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Apache + Tomcat + Mod_JK + SSL How to?
test time Stanczak Group wrote: Mladen Turk wrote: Stanczak Group wrote: I'm not familiar with mod_jk, but in Tomcat when using SSL I can put in a security constraint and it will redirect to a secure connection, so that's why I'm making it sound like a redirect. Hmm. You are still unclear. Seems to me that you are saying that you can access your application with http via mod_jk but not via https, and you can access jsp-examples both with http and https? Is this correct? yes that is correct. Also, adjust your clock. ? What do you mean? Regards, Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- Justin Stanczak Stanczak Group 812-735-3600 "All that is necessary for the triumph of evil is that good men do nothing." Edmund Burke .....__. ./ _/....._/..|_..... /...\../.__.\./\...__\/.._.\./._..\ \\_\..\..___/|...|..\..|.(..<_>.|.<_>..) .\__../\___.._\__|../__|..\/.\/.. \/.\/.\/.. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Apache + Tomcat + Mod_JK + SSL How to?
Mladen Turk wrote: Stanczak Group wrote: I'm not familiar with mod_jk, but in Tomcat when using SSL I can put in a security constraint and it will redirect to a secure connection, so that's why I'm making it sound like a redirect. Hmm. You are still unclear. Seems to me that you are saying that you can access your application with http via mod_jk but not via https, and you can access jsp-examples both with http and https? Is this correct? yes that is correct. Also, adjust your clock. ? What do you mean? Regards, Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- Justin Stanczak Stanczak Group 812-735-3600 "All that is necessary for the triumph of evil is that good men do nothing." Edmund Burke .....__. ./ _/....._/..|_..... /...\../.__.\./\...__\/.._.\./._..\ \\_\..\..___/|...|..\..|.(..<_>.|.<_>..) .\__../\___.._\__|../__|..\/.\/.. \/.\/.\/.. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Apache + Tomcat + Mod_JK + SSL How to?
Stanczak Group wrote: I'm not familiar with mod_jk, but in Tomcat when using SSL I can put in a security constraint and it will redirect to a secure connection, so that's why I'm making it sound like a redirect. Hmm. You are still unclear. Seems to me that you are saying that you can access your application with http via mod_jk but not via https, and you can access jsp-examples both with http and https? Is this correct? Also, adjust your clock. Regards, Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Apache + Tomcat + Mod_JK + SSL How to?
I'm not familiar with mod_jk, but in Tomcat when using SSL I can put in a security constraint and it will redirect to a secure connection, so that's why I'm making it sound like a redirect. But the real issue is when I access the url for example http://www.myapp.com/thisapp it works, but when I add https://www.myapp.com/thisapp it fails saying "The requested URL /MemCarQue/cars was not found on this server.". But the default jsp-examples/ url works with SSL and without. Once this works then I'll want to make it so the /thisapp/secure part works like Tomcat stand alone and redirects based on the security constraint in web.xml of the app. I'm guessing this can be done by setting the Tomcat to redirect to SSL port. Mladen Turk wrote: Stanczak Group wrote: Well, maybe I've just make a mistake somewhere. I looked at my jsp-examples/ url work with ssl and without in mod_jk. Where should I look to see why this one works but my app doesn't? Stanczak Group wrote: I know this has been asked, but the all the emails and on-line docs don't seem to make sense to me. What I have is this. Apache, Tomcat, Mod_JK all running and working on my server. The SSL on Apache is working as well. All I want to do is have certain urls use SSL on Apache. So when you go to /site it's non-ssl, which works now, but when you access /admin it redirects to SSL, this is not working now. How do I get this working? Hi, Your question is a little bit unclear. If you need a redirection from http://site/admin/ to https://site/admin/ look at the mod_rewrite, or simply make a absolute link to https page. Regards, Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- Justin Stanczak Stanczak Group 812-735-3600 "All that is necessary for the triumph of evil is that good men do nothing." Edmund Burke .....__. ./ _/....._/..|_..... /...\../.__.\./\...__\/.._.\./._..\ \\_\..\..___/|...|..\..|.(..<_>.|.<_>..) .\__../\___.._\__|../__|..\/.\/.. \/.\/.\/.. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Apache + Tomcat + Mod_JK + SSL How to?
Stanczak Group wrote: Well, maybe I've just make a mistake somewhere. I looked at my jsp-examples/ url work with ssl and without in mod_jk. Where should I look to see why this one works but my app doesn't? Stanczak Group wrote: I know this has been asked, but the all the emails and on-line docs don't seem to make sense to me. What I have is this. Apache, Tomcat, Mod_JK all running and working on my server. The SSL on Apache is working as well. All I want to do is have certain urls use SSL on Apache. So when you go to /site it's non-ssl, which works now, but when you access /admin it redirects to SSL, this is not working now. How do I get this working? Hi, Your question is a little bit unclear. If you need a redirection from http://site/admin/ to https://site/admin/ look at the mod_rewrite, or simply make a absolute link to https page. Regards, Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Apache + Tomcat + Mod_JK + SSL How to?
Well, maybe I've just make a mistake somewhere. I looked at my jsp-examples/ url work with ssl and without in mod_jk. Where should I look to see why this one works but my app doesn't? Stanczak Group wrote: I know this has been asked, but the all the emails and on-line docs don't seem to make sense to me. What I have is this. Apache, Tomcat, Mod_JK all running and working on my server. The SSL on Apache is working as well. All I want to do is have certain urls use SSL on Apache. So when you go to /site it's non-ssl, which works now, but when you access /admin it redirects to SSL, this is not working now. How do I get this working? -- Justin Stanczak Stanczak Group 812-735-3600 "All that is necessary for the triumph of evil is that good men do nothing." Edmund Burke .....__. ./ _/....._/..|_..... /...\../.__.\./\...__\/.._.\./._..\ \\_\..\..___/|...|..\..|.(..<_>.|.<_>..) .\__../\___.._\__|../__|..\/.\/.. \/.\/.\/.. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Apache + Tomcat + Mod_JK + SSL How to?
I know this has been asked, but the all the emails and on-line docs don't seem to make sense to me. What I have is this. Apache, Tomcat, Mod_JK all running and working on my server. The SSL on Apache is working as well. All I want to do is have certain urls use SSL on Apache. So when you go to /site it's non-ssl, which works now, but when you access /admin it redirects to SSL, this is not working now. How do I get this working? -- Justin Stanczak Stanczak Group 812-735-3600 "All that is necessary for the triumph of evil is that good men do nothing." Edmund Burke .....__. ./ _/....._/..|_..... /...\../.__.\./\...__\/.._.\./._..\ \\_\..\..___/|...|..\..|.(..<_>.|.<_>..) .\__../\___.._\__|../__|..\/.\/.. \/.\/.\/.. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Does Tomcat 5 support mod_JK?
Try reading: http://jakarta.apache.org/tomcat/tomcat-5.5-doc/config/ajp.html for the Tomcat end and http://jakarta.apache.org/tomcat/connectors-doc/config/apache.html for the Apache httpd end. Mark g1 Sunkersett wrote: Hi, I am trying load balancing with Tomcat 5, fornted with Apache's mod_jk connector. It is always the local one that serves my request. Cannot get my remote Tomcat to serve any. http://localhost/jkstatus also gives a error page Have workers.properties and all configured but ... Doing a search on google found Tomcat + mod_JK documentation take me to Tomcat 4.0.1 docs (http://jakarta.apache.org/tomcat/tomcat-4.1-doc/config/jk.html) Tomcat 5 docs has almost nothing on mod_JK (The page http://jakarta.apache.org/tomcat/tomcat-5.0-doc/config/jk.html is NON existant) Am I trying in vain. DOES TOMCAT 5.x.xx support mod_JK or vice versa. I am using Tomcat 5.0.28 and mod_JK binary - mod_jk-1.2.14-apache-2.0.54.so OS: Windows XP any clues will be appreciated. thx g1 _ Is your PC infected? Get a FREE online computer virus scan from McAfee® Security. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963 - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Does Tomcat 5 support mod_JK?
Hi, I am trying load balancing with Tomcat 5, fornted with Apache's mod_jk connector. It is always the local one that serves my request. Cannot get my remote Tomcat to serve any. http://localhost/jkstatus also gives a error page Have workers.properties and all configured but ... Doing a search on google found Tomcat + mod_JK documentation take me to Tomcat 4.0.1 docs (http://jakarta.apache.org/tomcat/tomcat-4.1-doc/config/jk.html) Tomcat 5 docs has almost nothing on mod_JK (The page http://jakarta.apache.org/tomcat/tomcat-5.0-doc/config/jk.html is NON existant) Am I trying in vain. DOES TOMCAT 5.x.xx support mod_JK or vice versa. I am using Tomcat 5.0.28 and mod_JK binary - mod_jk-1.2.14-apache-2.0.54.so OS: Windows XP any clues will be appreciated. thx g1 _ Is your PC infected? Get a FREE online computer virus scan from McAfee® Security. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963 - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Strange redirects with Apache 2.0, mod_jk and Tomcat 5.5
> often, Firefox tellst me, that the redirect limit is execeeded when > surfing one of my pages. > > So i tried wget, and look at the result: > > [strange result] > > That's no joke! (www.mysite.com is a replacement for the real-website). > Look at the redirects! he's even jumping to /html/index.jsp - and for > some reason, tomcat redirects back to / - and than back again to > /html/index.jsp. That absolutly makes no sense! /index.jsp contains a > simple redirect - and /html/index.jsp is a simple page. Well, i recompiled apache, but didn't recompile mod_jk - well, the result was the one i described. After recompiling mod_jk, everything is fine again! signature.asc Description: OpenPGP digital signature
Strange redirects with Apache 2.0, mod_jk and Tomcat 5.5
Hi, often, Firefox tellst me, that the redirect limit is execeeded when surfing one of my pages. So i tried wget, and look at the result: $ LANG=C wget www.mysite.com --05:29:04-- http://www.mysite.com/ => `index.html.1' Resolving www.mysite.com... 80.70.176.140 Connecting to www.mysite.com[80.70.176.140]:80... connected. HTTP request sent, awaiting response... 302 Moved Temporarily Location: http://www.mysite.com/html/index.jsp [following] --05:29:04-- http://www.mysite.com/html/index.jsp => `index.jsp.29' Connecting to www.mysite.com[80.70.176.140]:80... connected. HTTP request sent, awaiting response... 302 Moved Temporarily Location: http://www.mysite.com [following] --05:29:04-- http://www.mysite.com/ => `index.html.1' Connecting to www.mysite.com[80.70.176.140]:80... connected. HTTP request sent, awaiting response... 302 Moved Temporarily Location: http://www.mysite.com [following] --05:29:04-- http://www.mysite.com/ => `index.html.1' Connecting to www.mysite.com[80.70.176.140]:80... connected. HTTP request sent, awaiting response... 302 Moved Temporarily Location: http://www.mysite.com [following] --05:29:04-- http://www.mysite.com/ => `index.html.1' Connecting to www.mysite.com[80.70.176.140]:80... connected. HTTP request sent, awaiting response... 302 Moved Temporarily Location: http://www.mysite.com [following] --05:29:04-- http://www.mysite.com/ => `index.html.1' Connecting to www.mysite.com[80.70.176.140]:80... connected. HTTP request sent, awaiting response... 302 Moved Temporarily Location: http://www.mysite.com [following] --05:29:04-- http://www.mysite.com/ => `index.html.1' Connecting to www.mysite.com[80.70.176.140]:80... connected. HTTP request sent, awaiting response... 302 Moved Temporarily Location: http://www.mysite.com/html/index.jsp [following] --05:29:04-- http://www.mysite.com/html/index.jsp => `index.jsp.29' Connecting to www.mysite.com[80.70.176.140]:80... connected. HTTP request sent, awaiting response... 302 Moved Temporarily Location: http://www.mysite.com [following] --05:29:04-- http://www.mysite.com/ => `index.html.1' Connecting to www.mysite.com[80.70.176.140]:80... connected. HTTP request sent, awaiting response... 302 Moved Temporarily Location: http://www.mysite.com [following] --05:29:04-- http://www.mysite.com/ => `index.html.1' Connecting to www.mysite.com[80.70.176.140]:80... connected. HTTP request sent, awaiting response... 302 Moved Temporarily Location: http://www.mysite.com [following] --05:29:04-- http://www.mysite.com/ => `index.html.1' Connecting to www.mysite.com[80.70.176.140]:80... connected. HTTP request sent, awaiting response... 302 Moved Temporarily Location: http://www.mysite.com [following] --05:29:04-- http://www.mysite.com/ => `index.html.1' Connecting to www.mysite.com[80.70.176.140]:80... connected. HTTP request sent, awaiting response... 302 Moved Temporarily Location: http://www.mysite.com [following] --05:29:05-- http://www.mysite.com/ => `index.html.1' Connecting to www.mysite.com[80.70.176.140]:80... connected. HTTP request sent, awaiting response... 302 Moved Temporarily Location: http://www.mysite.com/html/index.jsp [following] --05:29:05-- http://www.mysite.com/html/index.jsp => `index.jsp.29' Connecting to www.mysite.com[80.70.176.140]:80... connected. HTTP request sent, awaiting response... 302 Moved Temporarily Location: http://www.mysite.com [following] --05:29:05-- http://www.mysite.com/ => `index.html.1' Connecting to www.mysite.com[80.70.176.140]:80... connected. HTTP request sent, awaiting response... 302 Moved Temporarily Location: http://www.mysite.com/html/index.jsp [following] --05:29:05-- http://www.mysite.com/html/index.jsp => `index.jsp.29' Connecting to www.mysite.com[80.70.176.140]:80... connected. HTTP request sent, awaiting response... 200 OK Length: unspecified [text/html] [ <=> ] 24,409--.--K/s 05:29:05 (216.70 KB/s) - `index.jsp.29' saved [24409] That's no joke! (www.mysite.com is a replacement for the real-website). Look at the redirects! he's even jumping to /html/index.jsp - and for some reason, tomcat redirects back to / - and than back again to /html/index.jsp. That absolutly makes no sense! /index.jsp contains a simple redirect - and /html/index.jsp ist a simple pain. I've got the impression, that Tomcat redirects the browser to request a page again. I don't know why, but perhaps he does that while he's compiling the page. Does anybody think of anything that causes this? (except for buggy /index.jsp and /html/index.jsp - which is not the case, since they used to work with tomcat 4.1) Thx Sven signature.asc Description: OpenPGP digital signature
Re: sessions dropping with mod_ssl, mod_jk, mod_rewrite rules
Seale, Deryl wrote: Thanks for the information, Jon. I finally realized this when I examined the two different cookies Tomcat was setting: the first was marked secure, and the second was not. I followed the threads you provided, and one of the respondents hinted that this behavior may change. Does Tomcat 5.5.x still enforce this rule? This rule is still enforced and I am aware of no plans to change it. Mark - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: sessions dropping with mod_ssl, mod_jk, mod_rewrite rules
Thanks for the information, Jon. I finally realized this when I examined the two different cookies Tomcat was setting: the first was marked secure, and the second was not. I followed the threads you provided, and one of the respondents hinted that this behavior may change. Does Tomcat 5.5.x still enforce this rule? thanks. -d. -Original Message- From: Jon Wingfield [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 09, 2005 5:23 AM To: Tomcat Users List Subject: Re: sessions dropping with mod_ssl, mod_jk, mod_rewrite rules I'm pretty sure Tomcat doesn't allow a session to migrate from a secure (ssl) channel to an insecure one. It does allow the session to be maintained in the other direction, however. The rationale for this behaviour is that if the login is supposed to be secure why allow the session cookie to be snooped on an insecure channel. Doing a cursory search of the archives I found these threads: http://marc.theaimsgroup.com/?l=tomcat-user&m=111470187706771&w=2 http://marc.theaimsgroup.com/?l=tomcat-user&m=106871784707053&w=2 HTH, Jon - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: sessions dropping with mod_ssl, mod_jk, mod_rewrite rules
I'm pretty sure Tomcat doesn't allow a session to migrate from a secure (ssl) channel to an insecure one. It does allow the session to be maintained in the other direction, however. The rationale for this behaviour is that if the login is supposed to be secure why allow the session cookie to be snooped on an insecure channel. Doing a cursory search of the archives I found these threads: http://marc.theaimsgroup.com/?l=tomcat-user&m=111470187706771&w=2 http://marc.theaimsgroup.com/?l=tomcat-user&m=106871784707053&w=2 HTH, Jon Seale, Deryl wrote: Hi, there. I have a problem whereby tomcat is getting confused with user sessions due to (I think) some mod_rewrite rules that switch a user in and out of SSL. The general requirement I have is to only use SSL in certain parts of our application (login, user administration, etc), and we use mod_rewrite rules to enforce this. The problem is that while we can correctly make sure a user login is properly redirected to SSL, when that user clicks on a link following login (ie: a non-SSL request), they are sent back to the login page. This is due, I think, to tomcat confusedly thinking the subsequent request comes from a new, unauthenticated user, possibly because the second request is not over SSL. When I run an HTTP tracer, I indeed see that there is a new session cookie placed for the subsequent request. Below is the relevant portion of our httpd.conf file, followed by the workes.properties file. I've followed the recommendations I've seen online regarding connector configuration, but perhaps there is something subtle that is missing, or our rewrite rules are screwed up. Any insight is appreciated. thanks. -d. httpd.conf (irrelevant sections omitted): # Load mod_jk # LoadModulejk_module libexec/mod_jk.so # Configure mod_jk # JkWorkersFile "conf/workers.properties" JkLogFile "logs/mod_jk.log" JkLogLevel info JkShmFile "logs/jk.shm" JkShmSize 10M # Map mod_ssl vars to JK vars so that tomcat can reference SSL info. JkExtractSSLOn JkOptions +ForwardKeySize +ForwardURICompat -ForwardDirectories JkHTTPSIndicatorHTTPS JkSESSIONIndicator SSL_SESSION_ID JkCIPHERIndicator SSL_CIPHER JkCERTSIndicatorSSL_CLIENT_CERT JkMount /tech/* tech_1 JkMount /tech tech_1 RewriteEngine on RewriteLog "/usr/local/apache/logs/rewrite.log" RewriteLogLevel 1 RewriteCond %{SERVER_PORT} 80 #redirect requests for index.html to login page RewriteCond %{REQUEST_URI} /index.html RewriteRule ^/(.*) https://tech-dev.classroom.com/tech/home.do #redirect requests for login page RewriteCond %{REQUEST_URI} /tech/home.do RewriteRule ^/(.*) https://tech-dev.classroom.com/tech/home.do # redirect requests for the trial page RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} /tech/trial.do RewriteRule ^/(.*) https://tech-dev.classroom.com/$1 # redirect requests for the profile RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} /tech/.*profile.* RewriteRule ^/(.*) https://tech-dev.classroom.com/$1 # redirect requests for activation RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} /tech/activation.* RewriteRule ^/(.*) https://tech-dev.classroom.com/$1 # redirect requests for admin RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} /tech/admin/.* RewriteRule ^/(.*) https://tech-dev.classroom.com/$1 # redirect requests for michigan state RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} /michigan RewriteRule ^/(.*) https://tech-dev.classroom.com/tech/home.do # redirect requests for CSR Tool RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} /subscription* RewriteRule ^/(.*) http://SERVER_CSR/subscription RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} /studentwork/.* RewriteRule ^/(.*) http://forumtecprd.classroom.com/$1 ## ## SSL Settings ## ## Listen 443 ## ## SSL Global Context ## ## All SSL configuration in this context applies both to ## the main server and all SSL-enabled virtual hosts. ## # # Some MIME-types for downloading Certificates and CRLs # AddType application/x-x509-ca-cert .crt AddType application/x-pkcs7-crl.crl # Pass Phrase Dialog: # Configure the pass phrase gathering process. # The filtering dialog program (`builtin' is a internal # terminal dialog) has to provide the pass phrase on stdout. SSLPassPhraseDialog builtin # Inter-Process Session Cache: # Configure the SSL Session Cache: First the mechanism # to use and second the expiring timeout
RE: sessions dropping with mod_ssl, mod_jk, mod_rewrite rules
Forgot to add, we're using Tomcat 5.0.28, mod_jk 1.2.14, and apache 1.3.33. thanks. -d. -Original Message- From: Seale, Deryl Sent: Monday, August 08, 2005 11:48 AM To: tomcat-user@jakarta.apache.org Subject: sessions dropping with mod_ssl, mod_jk, mod_rewrite rules Hi, there. I have a problem whereby tomcat is getting confused with user sessions due to (I think) some mod_rewrite rules that switch a user in and out of SSL. The general requirement I have is to only use SSL in certain parts of our application (login, user administration, etc), and we use mod_rewrite rules to enforce this. The problem is that while we can correctly make sure a user login is properly redirected to SSL, when that user clicks on a link following login (ie: a non-SSL request), they are sent back to the login page. This is due, I think, to tomcat confusedly thinking the subsequent request comes from a new, unauthenticated user, possibly because the second request is not over SSL. When I run an HTTP tracer, I indeed see that there is a new session cookie placed for the subsequent request. Below is the relevant portion of our httpd.conf file, followed by the workes.properties file. I've followed the recommendations I've seen online regarding connector configuration, but perhaps there is something subtle that is missing, or our rewrite rules are screwed up. Any insight is appreciated. thanks. -d. httpd.conf (irrelevant sections omitted): # Load mod_jk # LoadModulejk_module libexec/mod_jk.so # Configure mod_jk # JkWorkersFile "conf/workers.properties" JkLogFile "logs/mod_jk.log" JkLogLevel info JkShmFile "logs/jk.shm" JkShmSize 10M # Map mod_ssl vars to JK vars so that tomcat can reference SSL info. JkExtractSSLOn JkOptions +ForwardKeySize +ForwardURICompat -ForwardDirectories JkHTTPSIndicatorHTTPS JkSESSIONIndicator SSL_SESSION_ID JkCIPHERIndicator SSL_CIPHER JkCERTSIndicatorSSL_CLIENT_CERT JkMount /tech/* tech_1 JkMount /tech tech_1 RewriteEngine on RewriteLog "/usr/local/apache/logs/rewrite.log" RewriteLogLevel 1 RewriteCond %{SERVER_PORT} 80 #redirect requests for index.html to login page RewriteCond %{REQUEST_URI} /index.html RewriteRule ^/(.*) https://tech-dev.classroom.com/tech/home.do #redirect requests for login page RewriteCond %{REQUEST_URI} /tech/home.do RewriteRule ^/(.*) https://tech-dev.classroom.com/tech/home.do # redirect requests for the trial page RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} /tech/trial.do RewriteRule ^/(.*) https://tech-dev.classroom.com/$1 # redirect requests for the profile RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} /tech/.*profile.* RewriteRule ^/(.*) https://tech-dev.classroom.com/$1 # redirect requests for activation RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} /tech/activation.* RewriteRule ^/(.*) https://tech-dev.classroom.com/$1 # redirect requests for admin RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} /tech/admin/.* RewriteRule ^/(.*) https://tech-dev.classroom.com/$1 # redirect requests for michigan state RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} /michigan RewriteRule ^/(.*) https://tech-dev.classroom.com/tech/home.do # redirect requests for CSR Tool RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} /subscription* RewriteRule ^/(.*) http://SERVER_CSR/subscription RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} /studentwork/.* RewriteRule ^/(.*) http://forumtecprd.classroom.com/$1 ## ## SSL Settings ## ## Listen 443 ## ## SSL Global Context ## ## All SSL configuration in this context applies both to ## the main server and all SSL-enabled virtual hosts. ## # # Some MIME-types for downloading Certificates and CRLs # AddType application/x-x509-ca-cert .crt AddType application/x-pkcs7-crl.crl # Pass Phrase Dialog: # Configure the pass phrase gathering process. # The filtering dialog program (`builtin' is a internal # terminal dialog) has to provide the pass phrase on stdout. SSLPassPhraseDialog builtin # Inter-Process Session Cache: # Configure the SSL Session Cache: First the mechanism # to use and second the expiring timeout (in seconds). SSLSessionCache dbm:/usr/local/apache/logs/ssl_scache SSLSessionCacheTimeout 300 # Semaphore: # Configure the path to the mutual exclusion semaphore the # SSL engine uses internally for inter-process synchronization. SSLMutex file:/usr/local/apache/logs/ssl_mutex #
sessions dropping with mod_ssl, mod_jk, mod_rewrite rules
Hi, there. I have a problem whereby tomcat is getting confused with user sessions due to (I think) some mod_rewrite rules that switch a user in and out of SSL. The general requirement I have is to only use SSL in certain parts of our application (login, user administration, etc), and we use mod_rewrite rules to enforce this. The problem is that while we can correctly make sure a user login is properly redirected to SSL, when that user clicks on a link following login (ie: a non-SSL request), they are sent back to the login page. This is due, I think, to tomcat confusedly thinking the subsequent request comes from a new, unauthenticated user, possibly because the second request is not over SSL. When I run an HTTP tracer, I indeed see that there is a new session cookie placed for the subsequent request. Below is the relevant portion of our httpd.conf file, followed by the workes.properties file. I've followed the recommendations I've seen online regarding connector configuration, but perhaps there is something subtle that is missing, or our rewrite rules are screwed up. Any insight is appreciated. thanks. -d. httpd.conf (irrelevant sections omitted): # Load mod_jk # LoadModulejk_module libexec/mod_jk.so # Configure mod_jk # JkWorkersFile "conf/workers.properties" JkLogFile "logs/mod_jk.log" JkLogLevel info JkShmFile "logs/jk.shm" JkShmSize 10M # Map mod_ssl vars to JK vars so that tomcat can reference SSL info. JkExtractSSLOn JkOptions +ForwardKeySize +ForwardURICompat -ForwardDirectories JkHTTPSIndicatorHTTPS JkSESSIONIndicator SSL_SESSION_ID JkCIPHERIndicator SSL_CIPHER JkCERTSIndicatorSSL_CLIENT_CERT JkMount /tech/* tech_1 JkMount /tech tech_1 RewriteEngine on RewriteLog "/usr/local/apache/logs/rewrite.log" RewriteLogLevel 1 RewriteCond %{SERVER_PORT} 80 #redirect requests for index.html to login page RewriteCond %{REQUEST_URI} /index.html RewriteRule ^/(.*) https://tech-dev.classroom.com/tech/home.do #redirect requests for login page RewriteCond %{REQUEST_URI} /tech/home.do RewriteRule ^/(.*) https://tech-dev.classroom.com/tech/home.do # redirect requests for the trial page RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} /tech/trial.do RewriteRule ^/(.*) https://tech-dev.classroom.com/$1 # redirect requests for the profile RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} /tech/.*profile.* RewriteRule ^/(.*) https://tech-dev.classroom.com/$1 # redirect requests for activation RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} /tech/activation.* RewriteRule ^/(.*) https://tech-dev.classroom.com/$1 # redirect requests for admin RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} /tech/admin/.* RewriteRule ^/(.*) https://tech-dev.classroom.com/$1 # redirect requests for michigan state RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} /michigan RewriteRule ^/(.*) https://tech-dev.classroom.com/tech/home.do # redirect requests for CSR Tool RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} /subscription* RewriteRule ^/(.*) http://SERVER_CSR/subscription RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} /studentwork/.* RewriteRule ^/(.*) http://forumtecprd.classroom.com/$1 ## ## SSL Settings ## ## Listen 443 ## ## SSL Global Context ## ## All SSL configuration in this context applies both to ## the main server and all SSL-enabled virtual hosts. ## # # Some MIME-types for downloading Certificates and CRLs # AddType application/x-x509-ca-cert .crt AddType application/x-pkcs7-crl.crl # Pass Phrase Dialog: # Configure the pass phrase gathering process. # The filtering dialog program (`builtin' is a internal # terminal dialog) has to provide the pass phrase on stdout. SSLPassPhraseDialog builtin # Inter-Process Session Cache: # Configure the SSL Session Cache: First the mechanism # to use and second the expiring timeout (in seconds). SSLSessionCache dbm:/usr/local/apache/logs/ssl_scache SSLSessionCacheTimeout 300 # Semaphore: # Configure the path to the mutual exclusion semaphore the # SSL engine uses internally for inter-process synchronization. SSLMutex file:/usr/local/apache/logs/ssl_mutex # Pseudo Random Number Generator (PRNG): # Configure one or more sources to seed the PRNG of the # SSL library. The seed data should be of good random quality. # WARNING! On some platforms /dev/random blocks if not enough entropy # is available
Re: frames and mod_jk on Windows
Frédéric Viollet a écrit : Hi all, Is anyone aware of a problem with using frames and mod_jk on windows? I'm using Apache 1.3.33 - mod_jk 1.2.14 and I've got the folowing problem: I'm trying to access an HTML page with frames in it. Only the first frame is correctly displayed; the other says "Internal Server Error" My HTML page is called toto.html, the first frame is bonjour.jsp and the second is bonjour2.jsp (the two jsps are identical) If anyone could tell me if I'm doing something wrong :( Thanks... On the apache side (in the mod_jk.log file) I get the following traces: [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c (449): Attempting to map URI '/myapp/toto.html' from 8 maps [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c (461): Attempting to map context URI '/jonasAdmin/*' [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c (461): Attempting to map context URI '/jiapAdmin/*' [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c (461): Attempting to map context URI '/jonasAdmin' [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c (461): Attempting to map context URI '/jiapAdmin' [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c (461): Attempting to map context URI '/myapp/*' [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c (475): Found a wildchar match bonita_worker -> /myapp/* [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_worker.c (111): found a worker bonita_worker [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_worker.c (301): Maintaining worker bonita_worker [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] mod_jk.c (488): Service protocol=HTTP/1.1 method=GET host=(null) addrr=129.185.75.10 name=biguine.frcl.bull.fr port=8000 auth=(null) user=(null) laddr=129.182.22.21 raddr=129.185.75.10 [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (2131): acquired connection cache slot=0 [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (566): ajp marshaling done [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (1670): processing with 3 retries [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (909): sending to ajp13 pos=4 len=273 max=8192 . [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (1261): request body to send 0 - request body to resend 0 [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (1037): received from ajp13 pos=0 len=139 max=8192 . [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (621): status = 200 [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (628): Number of headers is = 4 [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (684): Header[0] [ETag] = [W/"546-1123233762561"] [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (684): Header[1] [Last-Modified] = [Fri, 05 Aug 2005 09:22:42 GMT] [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (684): Header[2] [Content-Type] = [text/html] [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (684): Header[3] [Content-Length] = [546] [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (1037): received from ajp13 pos=0 len=550 max=8192 . [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (1037): received from ajp13 pos=0 len=2 max=8192 ... [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (2074): recycling connection cache slot=0 for worker bonita_worker [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] mod_jk.c (1828): Service finished with status=200 for worker=bonita_worker [Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c (449): Attempting to map URI '/myapp/bonjour.jsp' from 8 maps [Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c (461): Attempting to map context URI '/jonasAdmin/*' [Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c (461): Attempting to map context URI '/jiapAdmin/*' [Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c (461): Attempting to map context URI '/jonasAdmin' [Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c (461): Attempting to map context URI '/jiapAdmin' [Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c (461): Attempting to map context URI '/myapp/*' [Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c (475): Found a wildchar match bonita_worker -> /myapp/* [Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_worker.c (111): found a worker bonita_worker [Fri Aug 05 11:24:22 2005] [5172:2684] [debug] mod_jk.c (488): Service protocol=HTTP/1.1 method=GET host=(null) addrr=129.185.75.10 name=biguine.frcl.bull.fr port=8000 auth=(null) user=(null) laddr=129.182.22.21 radd
frames and mod_jk on Windows
Hi all, Is anyone aware of a problem with using frames and mod_jk on windows? I'm using Apache 1.3.33 - mod_jk 1.2.14 and I've got the folowing problem: I'm trying to access an HTML page with frames in it. Only the first frame is correctly displayed; the other says "Internal Server Error" My HTML page is called toto.html, the first frame is bonjour.jsp and the second is bonjour2.jsp (the two jsps are identical) If anyone could tell me if I'm doing something wrong :( Thanks... On the apache side (in the mod_jk.log file) I get the following traces: [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c (449): Attempting to map URI '/myapp/toto.html' from 8 maps [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c (461): Attempting to map context URI '/jonasAdmin/*' [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c (461): Attempting to map context URI '/jiapAdmin/*' [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c (461): Attempting to map context URI '/jonasAdmin' [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c (461): Attempting to map context URI '/jiapAdmin' [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c (461): Attempting to map context URI '/myapp/*' [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_uri_worker_map.c (475): Found a wildchar match bonita_worker -> /myapp/* [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_worker.c (111): found a worker bonita_worker [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_worker.c (301): Maintaining worker bonita_worker [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] mod_jk.c (488): Service protocol=HTTP/1.1 method=GET host=(null) addrr=129.185.75.10 name=biguine.frcl.bull.fr port=8000 auth=(null) user=(null) laddr=129.182.22.21 raddr=129.185.75.10 [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (2131): acquired connection cache slot=0 [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (566): ajp marshaling done [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (1670): processing with 3 retries [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (909): sending to ajp13 pos=4 len=273 max=8192 . [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (1261): request body to send 0 - request body to resend 0 [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (1037): received from ajp13 pos=0 len=139 max=8192 . [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (621): status = 200 [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (628): Number of headers is = 4 [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (684): Header[0] [ETag] = [W/"546-1123233762561"] [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (684): Header[1] [Last-Modified] = [Fri, 05 Aug 2005 09:22:42 GMT] [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (684): Header[2] [Content-Type] = [text/html] [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (684): Header[3] [Content-Length] = [546] [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (1037): received from ajp13 pos=0 len=550 max=8192 . [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (1037): received from ajp13 pos=0 len=2 max=8192 ... [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] jk_ajp_common.c (2074): recycling connection cache slot=0 for worker bonita_worker [Fri Aug 05 11:24:22 2005] [5172:5584] [debug] mod_jk.c (1828): Service finished with status=200 for worker=bonita_worker [Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c (449): Attempting to map URI '/myapp/bonjour.jsp' from 8 maps [Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c (461): Attempting to map context URI '/jonasAdmin/*' [Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c (461): Attempting to map context URI '/jiapAdmin/*' [Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c (461): Attempting to map context URI '/jonasAdmin' [Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c (461): Attempting to map context URI '/jiapAdmin' [Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c (461): Attempting to map context URI '/myapp/*' [Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_uri_worker_map.c (475): Found a wildchar match bonita_worker -> /myapp/* [Fri Aug 05 11:24:22 2005] [5172:2684] [debug] jk_worker.c (111): found a worker bonita_worker [Fri Aug 05 11:24:22 2005] [5172:2684] [debug] mod_jk.c (488): Service protocol=HTTP/1.1 method=GET host=(null) addrr=129.185.75.10 name=biguine.frcl.bull.fr port=8000 auth=(null) user=(null) laddr=129.182.22.21 raddr=129.185.75.10 [Fri Aug 05 1
Re: mod_jk or jk2??
You want to use mod_jk. JK2 has been deprecated and is no longer in active development. On 8/3/05, MC Moisei <[EMAIL PROTECTED]> wrote: > I thought the jk2 is newer... but I can be wrong... > > MC > > > >From: Luis Torres <[EMAIL PROTECTED]> > >Reply-To: "Tomcat Users List" > >To: Tomcat Users List > >Subject: mod_jk or jk2?? > >Date: Wed, 03 Aug 2005 13:47:42 -0500 > > > >Hello everyone, > > > >I see lots of posts saying that they are using or implementing jk2? For > >what I understand, that has been replaced by mod_jk... so which one is > >better or what is recommended?? > > > >I also have found better documentation related to jk2 so that adds to the > >puzzle. > > > >Regards, > > > >Luis > > > >- > >To unsubscribe, e-mail: [EMAIL PROTECTED] > >For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > -- Ben Ricker He's just this guy, you know? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: mod_jk or jk2??
I thought the jk2 is newer... but I can be wrong... MC From: Luis Torres <[EMAIL PROTECTED]> Reply-To: "Tomcat Users List" To: Tomcat Users List Subject: mod_jk or jk2?? Date: Wed, 03 Aug 2005 13:47:42 -0500 Hello everyone, I see lots of posts saying that they are using or implementing jk2? For what I understand, that has been replaced by mod_jk... so which one is better or what is recommended?? I also have found better documentation related to jk2 so that adds to the puzzle. Regards, Luis - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
mod_jk or jk2??
Hello everyone, I see lots of posts saying that they are using or implementing jk2? For what I understand, that has been replaced by mod_jk... so which one is better or what is recommended?? I also have found better documentation related to jk2 so that adds to the puzzle. Regards, Luis - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: mod_jk not detecting loss of a load balanced machine
Hi, Is this issue described below familiar to anyone who is really knowledgable of how mod_jk works? Thank you, Edmon Edmon Begoli wrote: We've noticed with two versions of mod_jk we've been using (1.2.5 and one older) that if one of the machines hosting load balanced tomcat gets completely off the network (power loss) mod_jk will seem not to emove that one from the load balanced instances, so the whole site will appear down because mod_jk will I guess try to hit it. I can not say for sure that it is the reason behind the scenes, but I can say for sure that these versions of mod_jk do not respond well to machine losses - which is a pretty possible scenario. My question is - has this been addressed in some of the later releases, and if not is there a workaround? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Building statically mod_jk in Apache in Windows environment
Frédéric Viollet wrote: Hi everybody, I'm using mod_jk - 1.2.14.1 and apache - 1.3.19 I would like to link statically mod_jk in Apache in Windows environment. Has anyone already managed this? The configure --with-apache command works fine for Solaris and AIX; and it compiles and links alright...but I don't know what to use to integrate the mod_jk feature in Apache for Windows... Not sure what features will you have with static build that can not be accomplished with dynamic one. You should first consider to use the 1.3.33 version of the apache. Although the Apache 2 version is much more stable then any 1.3 version on windows platform, so perhaps you should consider using that. In general you will need to create a mod_jk .lib project and link the ApacheCore.dll with that library, also adding the module reference to the src/os/win32/modules.c Regards, Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Building statically mod_jk in Apache in Windows environment
Hi everybody, I'm using mod_jk - 1.2.14.1 and apache - 1.3.19 I would like to link statically mod_jk in Apache in Windows environment. Has anyone already managed this? The configure --with-apache command works fine for Solaris and AIX; and it compiles and links alright...but I don't know what to use to integrate the mod_jk feature in Apache for Windows... Thanks for your help... Fred - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]