Hi, I had a look at performance with the CPU security fixes on my Fedora 27. Although it is a bit early for final conclusions, I can report that they have an impact for Tomcat, but it doesn't seem it's as much as my initial measurements. I chose to use HTTP/2 this time, it's more complex.
h2load -n 100000 -c 10 PTI on: docs/changelog.html NIO2: 17200 (sendfile, without it it is slightly below NIO) NIO: 9000 APR: 14450 /tomcat.gif NIO2: 52000 NIO: 47000 APR: 55000 PTI off: docs/changelog.html NIO2: 19000 (sendfile) NIO: 9500 APR:16000 /tomcat.gif NIO2: 57000 NIO: 51000 APR: 59000 The APR connector performs very well here, especially on the large file test. Rémy