I ask that as we had similar idea to make shared hosting for tomcat. The main problem for us was unloading code (context, sites).
It is complex to stop thread that do not wish to properly stop. You can protect shutdown port with Security Manager that you must implement for such project. Abuser may create memory leaks by placing references to big objects. As I understand you can't force to unload code. .NET has "Application Domain" that is able to do that. It is used in IIS. Java does not have such things. -- <host> is not real problem. You can check how such things are implemented in tomcat's admin page. It is JSP app that is able to add recourses and adjust server.xml file. -- Best regards, Dima mailto:[EMAIL PROTECTED] Thursday, December 21, 2006, 10:47:39 AM, you wrote: WP> Dima Retov ??: >> WP> We are starting to design a ISP level JSP virutal hosting system which >> WP> could serve JSP and Servlets. >> >> Would you use have 1 tomcat per server? >> >> If yes, Would you protect it from abusing code? e.g. Anyone would be >> able to upload code with infinite loops to server. >> WP> Thanks for your response. WP> I have installed only one tomcat server in a machine. If this is the WP> thing you have mentioned by "1 tomcat per server", i think i have to WP> protect the tomcat server from abusing code. WP> But i don't know so much about tomcat configuration, the only things i WP> have done to protect the security of the tomcat server is WP> 1. use iptables blocked the internal ports WP> 8009, etc .. WP> 2. use -security option during start the tomcat server. WP> To be more safely, what should i do with the server, or maybe you could WP> point out some articles i have to read. WP> Thanks again. WP> Wang. WP> --------------------------------------------------------------------- WP> To start a new topic, e-mail: users@tomcat.apache.org WP> To unsubscribe, e-mail: [EMAIL PROTECTED] WP> For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
