RE: TLSv1.3 Support in Tomcat

2021-06-28 Thread S Abirami
Hi Christopher, Below is my Connector element, sslEnabledProtocols =TLSv1.2 ,TLS 1.3 it is working fine with TLSv1.2. When sslEnabledProtocols=TLSv1.3, Tomcat is started but, the browser unable to perform handshake with webapp. Is there any dependency with Cipher suites? Regards,

Using log4j for logging

2021-06-28 Thread Niranjan Rao
Greetings, I wanted to setup log4j for tomcat logs and google searches seems to indicate that this is possible. Many articles speak about downloading tomcat-juli-adapters.jar from bin/extras directory. I found out that for tomcat version 9, extras directory is last present on version 9.0.14

Re: 500 instances of tomcat on the same server

2021-06-28 Thread John Larsen
No need to be discouraged. Docker is just a set of tools. You can still use docker to create images, but you dont need docker to use those images in a container. K8s is using industry standard containerd. https://kubernetes.io/blog/2020/12/02/dont-panic-kubernetes-and-docker/ John Larsen On

RE: 500 instances of tomcat on the same server

2021-06-28 Thread Eric Robinson
Guido, I think you intended that message for me, not Brian. Thanks much for the feedback. I have been reading about Kubernetes, but I got discouraged when I saw that they dropped Docker support, since Docker seems to be the most popular containeriziation technology. Also, most of the

RE: 500 instances of tomcat on the same server

2021-06-28 Thread Eric Robinson
> -Original Message- > From: Brian Wolfe > Sent: Monday, June 28, 2021 12:23 PM > To: Tomcat Users List > Subject: Re: 500 instances of tomcat on the same server > > I tend to agree with the initial assessment from Mark, your only issue would > be on the OS level. # of file descriptors

Re: 500 instances of tomcat on the same server

2021-06-28 Thread Guido Jäkel
Dear Brian, please take the time to read about Linux Kernel namespaces as the technical base of containers. It's like two viewpoints to one thing. Take the network namespace as an example: From the conceptual point of view it looks like you have N indipended, functional identical "IP Stacks".

Re: Possible bug in http2 window size handling in tomcat 9.0.45

2021-06-28 Thread Mark Thomas
On 28/06/2021 15:11, Mark Thomas wrote: On 28/06/2021 10:53, Erik Nilsson wrote: Yep, something seems to go wrong with the waitingFor field in WindowAllocationManager. We are developing a quite complex embedded cms application, don't know if I will be able to share this application.

Re: 500 instances of tomcat on the same server

2021-06-28 Thread Brian Wolfe
I tend to agree with the initial assessment from Mark, your only issue would be on the OS level. # of file descriptors for connections. That many tomcat servers and your gonna start using a lot of ports and push the OS limits on file read/write capabilities. >From an architecture perspective you

RE: 500 instances of tomcat on the same server

2021-06-28 Thread Eric Robinson
> -Original Message- > From: Mark Thomas > Sent: Monday, June 28, 2021 9:04 AM > To: users@tomcat.apache.org > Subject: Re: 500 instances of tomcat on the same server > > On 28/06/2021 14:53, Christopher Schultz wrote: > > Eric, > > > > On 6/25/21 22:58, Eric Robinson wrote: > >> We

RE: 500 instances of tomcat on the same server

2021-06-28 Thread Eric Robinson
> -Original Message- > From: Christopher Schultz > Sent: Monday, June 28, 2021 8:54 AM > To: users@tomcat.apache.org > Subject: Re: 500 instances of tomcat on the same server > > Eric, > > On 6/25/21 22:58, Eric Robinson wrote: > > We can run 75 to 125 instances of tomcat on a single

RE: [Possible Spam] Re: TLSv1.3 Support in Tomcat

2021-06-28 Thread Mark A. Claassen
I am not sure how it is not working for you, so this may not be relevant. However, this caused me a lot of confusion. https://stackoverflow.com/questions/57601284/java-11-and-12-ssl-sockets-fail-on-a-handshake-failure-error-with-tlsv1-3-enable I had to disable TLS 1.3 to get my Java client to

Re: Questions about Integrated Windows Authentication

2021-06-28 Thread Carsten Klein
Sorry Mark, I've clicked the wrong button in my mail client :( On 28.06.2021 15:29, Mark Thomas wrote: Note that Tomcat 7 is no longer supported. I guess it's nearly the same for all versions of Tomcat. That looks more like some form of configuration issue but I always found the Kerberos

Re: 500 instances of tomcat on the same server

2021-06-28 Thread Christopher Schultz
Mark, On 6/28/21 10:04, Mark Thomas wrote: On 28/06/2021 14:53, Christopher Schultz wrote: Eric, On 6/25/21 22:58, Eric Robinson wrote: We can run 75 to 125 instances of tomcat on a single Linux server with 12 cores and 128GB RAM. It works great. CPU is around 25%, our JVMs are not throwing

Re: Possible bug in http2 window size handling in tomcat 9.0.45

2021-06-28 Thread Mark Thomas
On 28/06/2021 10:53, Erik Nilsson wrote: Yep, something seems to go wrong with the waitingFor field in WindowAllocationManager. We are developing a quite complex embedded cms application, don't know if I will be able to share this application. Hopefully you can reproduce this anyway by using

Re: 500 instances of tomcat on the same server

2021-06-28 Thread Mark Thomas
On 28/06/2021 14:53, Christopher Schultz wrote: Eric, On 6/25/21 22:58, Eric Robinson wrote: We can run 75 to 125 instances of tomcat on a single Linux server with 12 cores and 128GB RAM. It works great. CPU is around 25%, our JVMs are not throwing OOMEs, iowait is minimal, and network

Re: TLSv1.3 Support in Tomcat

2021-06-28 Thread Christopher Schultz
Abirami, On 6/28/21 07:16, S Abirami wrote: TLSv1.3 support is available in Tomcat. I tried just updating server.xml[sslEnabledProtocols=TLSv1.3] and restarted tomcat. It doesn't work. [We are using Tomcat 9.0.46 and JDK 8u291] Please let me know any other configuration also needs to be

Re: 500 instances of tomcat on the same server

2021-06-28 Thread Christopher Schultz
Eric, On 6/25/21 22:58, Eric Robinson wrote: We can run 75 to 125 instances of tomcat on a single Linux server with 12 cores and 128GB RAM. It works great. CPU is around 25%, our JVMs are not throwing OOMEs, iowait is minimal, and network traffic is about 30Mbps. We're happy with the results.

Re: Re-Use TCP Source Ports if the Socket is Unique?

2021-06-28 Thread Christopher Schultz
Eric, On 6/25/21 22:09, Eric Robinson wrote: -Original Message- From: Olaf Kock Sent: Friday, June 25, 2021 8:07 AM To: users@tomcat.apache.org Subject: Re: Re-Use TCP Source Ports if the Socket is Unique? On 25.06.21 14:46, Eric Robinson wrote: Olaf and Scott -- Thanks to both

Re: Questions about Integrated Windows Authentication

2021-06-28 Thread Mark Thomas
On 28/06/2021 10:36, Carsten Klein wrote: Hi there, I have two questions about Tomcat's Integrated Windows Authentication: Tomcat is stuck on version 7.0.52 on an outdated Ubuntu 14.04 LTS. Note that Tomcat 7 is no longer supported. 1. useDelegatedCredential = true I'm using JNDIRealm

RE: TLSv1.3 Support in Tomcat

2021-06-28 Thread S Abirami
Hi All, We are using Tomcat 9.0.46 and JDK 8u291 Regards, Abirami.S -Original Message- From: S Abirami Sent: Monday, June 28, 2021 4:47 PM To: Tomcat Users List Subject: TLSv1.3 Support in Tomcat Hi All, TLSv1.3 support is available in Tomcat. I tried just updating

Re: TLSv1.3 Support in Tomcat

2021-06-28 Thread calder
On Mon, Jun 28, 2021, 06:17 S Abirami wrote: > Hi All, > > TLSv1.3 support is available in Tomcat. > > I tried just updating server.xml[sslEnabledProtocols=TLSv1.3] and > restarted tomcat. It doesn't work. > > Please let me know any other configuration also needs to be changed. > You did not

TLSv1.3 Support in Tomcat

2021-06-28 Thread S Abirami
Hi All, TLSv1.3 support is available in Tomcat. I tried just updating server.xml[sslEnabledProtocols=TLSv1.3] and restarted tomcat. It doesn't work. Please let me know any other configuration also needs to be changed. Regards, Abirami.S

Re: Possible bug in http2 window size handling in tomcat 9.0.45

2021-06-28 Thread Erik Nilsson
Yep, something seems to go wrong with the waitingFor field in WindowAllocationManager. We are developing a quite complex embedded cms application, don't know if I will be able to share this application. Hopefully you can reproduce this anyway by using the nghttp client and another large webapp?

Questions about Integrated Windows Authentication

2021-06-28 Thread Carsten Klein
Hi there, I have two questions about Tomcat's Integrated Windows Authentication: Tomcat is stuck on version 7.0.52 on an outdated Ubuntu 14.04 LTS. 1. useDelegatedCredential = true I'm using JNDIRalm together with the SPNEGO authenticator. If the Realm's option 'useDelegatedCredential' is

Re: Possible bug in http2 window size handling in tomcat 9.0.45

2021-06-28 Thread Mark Thomas
On 27/06/2021 12:05, Erik Nilsson wrote: We might have found an issue with the window size in http2 in Tomcat 9.0.45. Thanks for the heads up. 9.0.45 has fixes for all the known issues with window size management so this looks like a potential new bug. java.lang.IllegalStateException:

Re: 500 instances of tomcat on the same server

2021-06-28 Thread Mark Thomas
On 26/06/2021 03:58, Eric Robinson wrote: We can run 75 to 125 instances of tomcat on a single Linux server with 12 cores and 128GB RAM. It works great. CPU is around 25%, our JVMs are not throwing OOMEs, iowait is minimal, and network traffic is about 30Mbps. We're happy with the results.

Re: Trouble with HTTP/2 during concurrent bulk data transfer (server -> client)

2021-06-28 Thread Mark Thomas
On 28/06/2021 06:14, Deshmukh, Kedar wrote: Any tentative time line when fix will be available in 9.0.X release ? Releases are typically made every month. The release usually happens some time in the second week of the month. The July releases are currently look like they will be