Re: Tomcat not scaling under load - Tsung v Apache Bench test

2016-11-28 Thread Szymon Czaja
I will run a test in the meantime to check but this is very much unlikely, I can see on the Amazon console that the load balancer CPU is hardly doing anything with peaks at 2%. Let's assume load balancer is not an issue. Szymon On 28 November 2016 at 12:29, André Warnier (tomcat)

Re: Tomcat not scaling under load - Tsung v Apache Bench test

2016-11-28 Thread Szymon Czaja
Completely agree. I am in the process of setting up a direct connection to Tomcat bypassing load balancer. Will give an update soon. Szymon On 28 November 2016 at 13:40, André Warnier (tomcat) wrote: > On 28.11.2016 14:10, Szymon Czaja wrote: > >> I will run a test in the

Re: Tomcat not scaling under load - Tsung v Apache Bench test

2016-11-28 Thread Szymon Czaja
Hi, I have updated my question on SO. I have noticed that the number of ESTABLISHED connections goes up on the client after few minutes. I expected the same on the server which does not seem to be the case. Any ideas? Szymon On 28 November 2016 at 10:05, Mark Thomas wrote: >

Re: Tomcat not scaling under load - Tsung v Apache Bench test

2016-11-28 Thread tomcat
On 28.11.2016 14:10, Szymon Czaja wrote: I will run a test in the meantime to check but this is very much unlikely, I can see on the Amazon console that the load balancer CPU is hardly doing anything with peaks at 2%. Let's assume load balancer is not an issue. I am not saying that the proxy

Re: Tomcat not scaling under load - Tsung v Apache Bench test

2016-11-28 Thread tomcat
On 28.11.2016 12:52, Szymon Czaja wrote: Hi, I have updated my question on SO. I have noticed that the number of ESTABLISHED connections goes up on the client after few minutes. I expected the same on the server which does not seem to be the case. Any ideas? Just a guess without looking very

redirect 8445 to 445

2016-11-28 Thread Vivek Patil
Hello All, I have setup Tomcat8 with SSL on AWS. Suppose my url is "https://mydomain.com:8443; I want to do, when I hit "mydomain.com" it should move to https without any port no. Please help me out. -- Thanks & Regrads Vivek Patil Sr IT Engineer. Spring Computing Technologies Pvt. Ltd.

Re: Thread-safety of javax.servlet.Servlet#getServletConfig()

2016-11-28 Thread Péter Gergely Horváth
Hi Andy, Thank you very much for your feedback, but I think there is a slight misunderstanding here: I know the order in which a servlet is initialized and put into service, and this question is not related to that. It's related to the _visibility_ of the field. The question is about the thread

Re: redirect 8445 to 445

2016-11-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Vivek, On 11/28/16 9:55 AM, Vivek Patil wrote: > Hello All, > > I have setup Tomcat8 with SSL on AWS. Suppose my url is > "https://mydomain.com:8443; I want to do, when I hit "mydomain.com" > it should move to https without any port no. Then you

Re: Apache/Tomcat vulnerability

2016-11-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jaaz, On 11/27/16 1:03 PM, Jaaz Portal wrote: > Then they exploited some well know vulnerability in mod_proxy. We > have updated apache to the latest but again they has exploited it, > so we have switched to mod_jk. And then guess what. They

Exception in thread "http-bio-8080-exec-120" java.lang.OutOfMemoryError: PermGen space

2016-11-28 Thread Kaushal Shriyan
Hi, I am seeing the below PermGen space issue in tomcat catalina.out file. Currently i am running Apache Tomcat Version 7.0.59 on CentOS release 6.8 (Final) java -version java version "1.7.0_80" Java(TM) SE Runtime Environment (build 1.7.0_80-b15) Java HotSpot(TM) 64-Bit Server VM (build

Re: Apache/Tomcat vulnerability

2016-11-28 Thread tomcat
On 28.11.2016 20:34, Jaaz Portal wrote: hi mark, yes, i understand now what slowloris attack is. maybe it was this maybe *this one based on * * mod_proxy denial of service * CVE-2014-0117 You keep on saying this, but the description

Re: Apache/Tomcat vulnerability

2016-11-28 Thread Jaaz Portal
hi Andre, you are wrong. This vulnerability is not only causing memory leaks, it makes also apache workers to hang, making it easy to exhaust the pool. what i have in my log files. But it is true also that such exhaustion can be made by other forms of dos attacks described in this thread.

Re: Thread-safety of javax.servlet.Servlet#getServletConfig()

2016-11-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Péter, On 11/28/16 11:01 AM, Péter Gergely Horváth wrote: > Thank you very much for your feedback, but I think there is a > slight misunderstanding here: I know the order in which a servlet > is initialized and put into service, and this question

Re: Apache/Tomcat vulnerability

2016-11-28 Thread Jaaz Portal
hi mark, yes, i understand now what slowloris attack is. maybe it was this maybe *this one based on * * mod_proxy denial of service * CVE-2014-0117 we do not know yet we have setup more logging and are waiting for them to attack once

Re: Apache/Tomcat vulnerability

2016-11-28 Thread Mark Eggers
Jaaz, On 11/27/2016 2:46 PM, André Warnier (tomcat) wrote: > On 27.11.2016 19:03, Jaaz Portal wrote: >> 2016-11-27 18:30 GMT+01:00 André Warnier (tomcat) : >> >>> On 27.11.2016 14:26, Jaaz Portal wrote: >>> hi, everything i know so far is just this single log line that

Re: Apache/Tomcat vulnerability

2016-11-28 Thread Jaaz Portal
hi, i written "exploited some well know vulnerability in mod_proxy" not mod_jk. This one: *moderate: * * mod_proxy denial of service * CVE-2014-0117 A flaw was found in mod_proxy in httpd versions 2.4.6 to 2.4.9. A remote attacker

Re: Apache/Tomcat vulnerability

2016-11-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jaaz, On 11/28/16 2:24 PM, Jaaz Portal wrote: > hi, i written "exploited some well know vulnerability in mod_proxy" > not mod_jk. Yes but then you implied that mod_jk had the same problem: On 11/27/16 1:03 PM, Jaaz Portal wrote: > Then they

Re: Exception in thread "http-bio-8080-exec-120" java.lang.OutOfMemoryError: PermGen space

2016-11-28 Thread Román Valoria
Use Java VisualVM to see PermGen memory allocation and troubleshoot. It would also let you validate that your sizing parameters are properly set. On Tue, Nov 29, 2016 at 2:09 AM, Kaushal Shriyan wrote: > Hi, > > I am seeing the below PermGen space issue in tomcat

Re: Exception in thread "http-bio-8080-exec-120" java.lang.OutOfMemoryError: PermGen space

2016-11-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Kaushal, On 11/28/16 1:09 PM, Kaushal Shriyan wrote: > Hi, > > I am seeing the below PermGen space issue in tomcat catalina.out > file. Currently i am running Apache Tomcat Version 7.0.59 on > CentOS release 6.8 (Final) java -version java version

Re: Exception in thread "http-bio-8080-exec-120" java.lang.OutOfMemoryError: PermGen space

2016-11-28 Thread Kaushal Shriyan
On Tue, Nov 29, 2016 at 7:40 AM, Román Valoria wrote: > Use Java VisualVM to see PermGen memory allocation and troubleshoot. It > would also let you validate that your sizing parameters are properly set. > > Hi Roman, Thanks for your reply. Are you referring to

Re: Exception in thread "http-bio-8080-exec-120" java.lang.OutOfMemoryError: PermGen space

2016-11-28 Thread Kaushal Shriyan
Thanks Roman and Chris for the detailed explanation. Is there a way to find out what all java classes are loaded during runtime? Thanks in Advance. Regards, Kaushal On Tue, Nov 29, 2016 at 10:47 AM, Román Valoria wrote: > Sun, or should I say Oracle now, seems to be

Re: Exception in thread "http-bio-8080-exec-120" java.lang.OutOfMemoryError: PermGen space

2016-11-28 Thread Román Valoria
Get the JDK launch the tool and look it up yourself. It has tons of issues, am I sure it has that. On Tue, Nov 29, 2016 at 2:56 PM, Kaushal Shriyan wrote: > Thanks Roman and Chris for the detailed explanation. Is there a way to find > out what all java classes are

Re: Exception in thread "http-bio-8080-exec-120" java.lang.OutOfMemoryError: PermGen space

2016-11-28 Thread Román Valoria
Sun, or should I say Oracle now, seems to be including the exact same tool on the JDK. It is already pre-packaged, so it may be customized by Oracle. It has the same look and feel as in the screenshot. On Tue, Nov 29, 2016 at 11:17 AM, Kaushal Shriyan wrote: > On Tue,

RE: Issues with accessing Apache Httpd Modules

2016-11-28 Thread kruthika.krishnan
Hi Torsten, This has been tried from various networks , and its still not accessible. https://modules.apache.org/ The above is the correct url used. Thanks and Regards, Kruthika Krishnan -Original Message- From: Torsten Krah [mailto:krah...@gmail.com] Sent: Monday, November 28, 2016

Re: Issues with accessing Apache Httpd Modules

2016-11-28 Thread Torsten Krah
This is the tomcat list, not the httpd one ... but your favorite search engine would easily have answered your question: http://httpd.apache.org/docs/2.4/mod/ Cheers Torsten Am Montag, den 28.11.2016, 07:18 + schrieb kruthika.krish...@accenture.com: > Hi , > I am trying to access the

Tomcat not scaling under load - Tsung v Apache Bench test

2016-11-28 Thread Szymon Czaja
Hi, I have asked the question on StackOverflow but I am not getting much response: http://stackoverflow.com/questions/40793335/why-tomcat- does-not-pass-a-tsung-performance-test-at-40-requests-per-second Could anyone help me understand why is Tomcat unable to keep up with the processing when

Re: Tomcat not scaling under load - Tsung v Apache Bench test

2016-11-28 Thread Mark Thomas
On 28/11/2016 09:53, Szymon Czaja wrote: > Hi, > I have asked the question on StackOverflow but I am not getting much > response: > > http://stackoverflow.com/questions/40793335/why-tomcat- > does-not-pass-a-tsung-performance-test-at-40-requests-per-second > > Could anyone help me understand why