Re: Tomcat with half open tcp sockets

2018-10-04 Thread Alex O'Ree
Sorry, mobile typo. Soap stack, as in cxf, axis, sun jaxws ri On Thu, Oct 4, 2018, 12:57 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Alex, > > On 10/3/18 20:25, Alex O'Ree wrote: > > Thanks Chris. I ended up using

Re: Tomcat with half open tcp sockets

2018-10-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Alex, On 10/3/18 20:25, Alex O'Ree wrote: > Thanks Chris. I ended up using aggressive read timeout values on > the Web service clients by adding properties to the binding > provider. Thing is, every jre version and soap attacks use > different

Re: Tomcat with half open tcp sockets

2018-10-03 Thread Alex O'Ree
Thanks Chris. I ended up using aggressive read timeout values on the Web service clients by adding properties to the binding provider. Thing is, every jre version and soap attacks use different versions which made this much harder to track down. On Tue, Oct 2, 2018, 1:44 PM Christopher Schultz

Re: Tomcat with half open tcp sockets

2018-10-02 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Alex, On 9/29/18 08:31, Alex O'Ree wrote: > Does tomcat detect or mitigate against half open tcp connections? Not directly. Basically, that's the OS's job. > I recently ran into an issue where something in between a java > jaxws client and a

Tomcat with half open tcp sockets

2018-09-29 Thread Alex O'Ree
Does tomcat detect or mitigate against half open tcp connections? I recently ran into an issue where something in between a java jaxws client and a jaxws service running in tomcat is interfering with the tcp stream. Resolving this client side has been a challenge due the transmitting thread