NIO Thread Madness

2025-03-24 Thread William Crowell
Hi,

I am running Apache Tomcat 9.0.97 on Windows Server 2022.  I’m running Oracle 
JDK 1.8.0_371-b11 with a 4GB min heap and a 16GB max heap.

I have an application deployed on this server that is hitting an Oracle 
database server.  I have noticed the server stops accepting requests after 
about 8-12 hours of uptime.  In JProfiler you can tell when this is about to 
happen because 20 of the 150 NIO threads BRIEFLY…BRIEFLY go into a blocked 
state while querying the database.  After this situation clears up, the NIO 
thread pool grows slightly by about 15-20 threads, and then the application 
server stops serving requests.

I looked at the GC log, and it looks completely healthy, and we are not even 
close to our max heap.  Metaspace size is not configured, but it looks fine 
from the GC logs.  There is no crash file or core dump produced.

I do notice some Oracle exceptions in the logs when this happens.  We do have 
about 1000 max connections defined on the Oracle database (which is too many).

I have my thread pool defined as follows in server.xml:

…
 

 
…

Are there any logs I can enable to find out why the application server stops 
accepting connections?

Regards,

William Crowell


This e-mail may contain information that is privileged or confidential. If you 
are not the intended recipient, please delete the e-mail and any attachments 
and notify us immediately.



Re: Verifying tomcat downloads: PGP keys unavailable at https://keys.openpgp.org

2025-03-24 Thread Roberto Resoli

Il 20/03/25 17:16, Christopher Schultz ha scritto:

Roberto,

On 3/20/25 7:52 AM, Roberto Resoli wrote:

Il 19/03/25 20:48, Mark Thomas ha scritto:

On 19/03/2025 18:51, Mark Thomas wrote:


...

So the signing fingerprint may not be the same of that of the 
principal key as metioned in the KEYS file.


Correct.

If the community would like me to do so, I can put the subkey into the 
KEYS file as well.


Imho this is not needed; a correct the verification procedure (import 
key, verify signature) shows clearly which is the signing key. One 
should not rely on the correspondance of the mentioned fingerprint 
alone, without importing the key.


...

Generally, I'd recommend obtaining keys for ASF releases from the 
associated KEYS file for that release. We watch all commits carefully 
but any changes to the KEYS files get looked at very closely.


I view the key servers as less reliable as there have been fake keys 
in my name uploaded in the past and I am not convinced it is no 
longer possible.


Yes; I guess that usual check of the signatures of the key by others 
(the web of trust) remains the main criterion.


+1

I and others attempt to participate in PGP keysigning exercises at any 
ASF events we attend. During those exercises, we confirm exact key 
signatures (to avoid signing fake or malicious keys uploaded by others), 
confirm identities (typically using a government-issued form of identity 
such as a passport), and sign each others keys.


This is fine!

So while some people will sign a key based upon minimal authentication 
criteria (e.g. I downloaded the key from a key server and signed it 
because I recognized the person's email address), ASF committers will 
(almost?) never do that. I personally have never signed the key of 
someone I had not met in person as described above.


Great.
Thank you

-rob


-chris


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Community over Code North America 2025 Call for Presentations is OPEN

2025-03-24 Thread Christopher Schultz

All,

Anyone who has ever considered doing a presentation at a Community over 
Code Conference (formerly ApacheCon), please head over to the Call for 
Presentations page and submit a proposal:


https://communityovercode.org/call-for-presentations/

You do NOT need to have anything ready to submit a proposal.
You do NOT need to be committer, etc. to submit a proposal.

We would very much like to have submissions from "the community" (that's 
YOU)!


For inspiration, you may want to look at the list of presentations from 
previous events:


https://tomcat.apache.org/presentations.html

-chris


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org