Rate Limiting support in Tomcat 9.x

2023-05-22 Thread Amit Pande
Hello, https://tomcat.apache.org/ I see rate limiting support added in Tomcat 10.1.9 . (Side note: The Apache Tomcat Project is proud to announce the release of version 10.1.8 of Apache Tomcat - I think it should be 10.1.9) Are there any plans to add this filter in 9.x? Could an enhancement re

Re: Tomcat connection pool 9.0.52 uses more then configured maxActive connections

2023-05-22 Thread Mark Thomas
On 22/05/2023 09:45, Stefan López Romero wrote: Hello, I have the problem that the Tomcat connection pool uses more than the maxActive connections. In my Dropwizard application I have configured a maxSize of 30, but I found the following message in the logs. Timeout: Pool empty. Unable to fe

[SECURITY] CVE-2023-28709 Apache Tomcat - Fix for CVE-2023-24998 was incomplete

2023-05-22 Thread Mark Thomas
CVE-2023-28709 Apache Tomcat - Fix for CVE-2023-24998 was incomplete Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 11.0.0-M2 to 11.0.0-M4 Apache Tomcat 10.1.5 to 10.1.7 Apache Tomcat 9.0.71 to 9.0.73 Apache Tomcat 8.5.85 to 8.5.87 Description: The f

Tomcat connection pool 9.0.52 uses more then configured maxActive connections

2023-05-22 Thread Stefan López Romero
Hello, I have the problem that the Tomcat connection pool uses more than the maxActive connections. In my Dropwizard application I have configured a maxSize of 30, but I found the following message in the logs. Timeout: Pool empty. Unable to fetch a connection in 15 seconds, none available[siz