Off topic question

2020-05-27 Thread jonmcalexander
I know this is off topic some, but does anyone know why development seemed to just stop on the tomcat-vault? Thanks, Dream * Excel * Explore * Inspire Jon McAlexander Asst Vice President Middleware Product Engineering Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions

Re: tomcat 8.5 config for ecommerce site, seeing request timeouts

2020-05-27 Thread Ayub Khan
Chris, Thank you for the input. We will upgrade tomcat and also text on the linux vm. I read the documentation of tomcat that maxConnections parameter refers to the number of connections it can serve. If we have 18 core CPU and 100GB RAM.What value can I set for maxConnections ? Want to make sure

Re: maxSwallowSize and misbehaving clients (e.g., mod_proxy_http)

2020-05-27 Thread Osipov, Michael
Am 2020-05-27 um 12:35 schrieb Mark Thomas: > This then opens up an interesting question of whether to bother reading > *any* of the request body if Tomcat knows it is going to close the > connection before reading all of it. Based on what you have observed, > would earlier closure of the connecti

Re: tomcat 8.5 config for ecommerce site, seeing request timeouts

2020-05-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ayub, On 5/27/20 09:26, Ayub Khan wrote: > previously I was using HTTP/1.1 connector, recently I changed to > NIO2 to see the performance. I read that NIO2 is non blocking so > trying to check how this works. Both NIO and NIO2 are non-blocking. The

Re: [OT] HELP wanted: Configure 2 domains, 2 SSL and 2 keyfiles on 1 VPS

2020-05-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, On 5/27/20 08:18, Ian Brown wrote: > I would suggest adding type="RSA" to your certificate elements. > (As shown in Christopher's example & matching your set up). It > defaults to UNDEFINED. Further, the Tomcat documentation talks > about one c

Re: HELP wanted: Configure 2 domains, 2 SSL and 2 keyfiles on 1 VPS

2020-05-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Maurice, On 5/27/20 09:04, Maurice Poos wrote: > Hello Mark, > > It's an honour! > > I reply to this in a non standard way because a few things have > happened while it was night over here. Long story short: it works > now. > > 1) The first thing wa

Re: tomcat 8.5 config for ecommerce site, seeing request timeouts

2020-05-27 Thread Ayub Khan
previously I was using HTTP/1.1 connector, recently I changed to NIO2 to see the performance. I read that NIO2 is non blocking so trying to check how this works. which connector protocol do you recommend and best configuration for the connector ? Which stable version of tomcat would you recomm

Re: HELP wanted: Configure 2 domains, 2 SSL and 2 keyfiles on 1 VPS

2020-05-27 Thread Maurice Poos
Hello Mark, It's an honour! I reply to this in a non standard way because a few things have happened while it was night over here. Long story short: it works now. 1) The first thing was that the server got upgraded to v9.0.35 Next I've began to work with your suggestions. >protocol="or

Re: maxSwallowSize and misbehaving clients (e.g., mod_proxy_http)

2020-05-27 Thread Oleg Kalnichevski
On Wed, 2020-05-27 at 14:47 +0200, Osipov, Michael wrote: > Am 2020-05-27 um 12:35 schrieb Mark Thomas: > > On 27/05/2020 10:59, Osipov, Michael wrote: > > > > > > > > > Am 2020-05-27 um 10:51 schrieb Mark Thomas: > > > > On 22/05/2020 22:59, Osipov, Michael wrote: > > > > > > > > > > > > > >

Re: maxSwallowSize and misbehaving clients (e.g., mod_proxy_http)

2020-05-27 Thread Osipov, Michael
Am 2020-05-27 um 12:35 schrieb Mark Thomas: On 27/05/2020 10:59, Osipov, Michael wrote: Am 2020-05-27 um 10:51 schrieb Mark Thomas: On 22/05/2020 22:59, Osipov, Michael wrote: I found one issue with HttpClient and Tomcat via HTTP/1.1. I have decrypted the TLS traffic [1]. I can see that

Re: HELP wanted: Configure 2 domains, 2 SSL and 2 keyfiles on 1 VPS

2020-05-27 Thread Ian Brown
Hi Maurice, Like Christopher I don't see any obvious issues. FYI, I run many virtual hosts all with certificates. Works great. I use certificateKeystoreType="PKCS12" and the related supporting software.  I would suggest adding type="RSA" to your certificate elements. (As shown in  Christopher's

Re: maxSwallowSize and misbehaving clients (e.g., mod_proxy_http)

2020-05-27 Thread Mark Thomas
On 27/05/2020 10:59, Osipov, Michael wrote: > > > Am 2020-05-27 um 10:51 schrieb Mark Thomas: >> On 22/05/2020 22:59, Osipov, Michael wrote: >> >> >> >>> I found one issue with HttpClient and Tomcat via HTTP/1.1. I have >>> decrypted the TLS traffic [1]. I can see that HttpClient sends the >>> h

Re: maxSwallowSize and misbehaving clients (e.g., mod_proxy_http)

2020-05-27 Thread Osipov, Michael
Am 2020-05-27 um 10:51 schrieb Mark Thomas: On 22/05/2020 22:59, Osipov, Michael wrote: I found one issue with HttpClient and Tomcat via HTTP/1.1. I have decrypted the TLS traffic [1]. I can see that HttpClient sends the headers also with a 4 KiB large chunk of the ZIP file. In return a To

Re: maxSwallowSize and misbehaving clients (e.g., mod_proxy_http)

2020-05-27 Thread Mark Thomas
On 22/05/2020 22:59, Osipov, Michael wrote: > I found one issue with HttpClient and Tomcat via HTTP/1.1. I have > decrypted the TLS traffic [1]. I can see that HttpClient sends the > headers also with a 4 KiB large chunk of the ZIP file. In return a > Tomcats send the 401 response with: >> Keep-

Re: tomcat 8.5 config for ecommerce site, seeing request timeouts

2020-05-27 Thread Mark Thomas
On 26/05/2020 23:28, Ayub Khan wrote: > Hi, > > During high load I am seeing below error on tomcat logs > > java.util.concurrent.ExecutionException: java.net.SocketTimeoutException: > timeout And the rest of that stack trace? It is hard to provide advice without context. We need to know what is

Re: HELP wanted: Configure 2 domains, 2 SSL and 2 keyfiles on 1 VPS

2020-05-27 Thread Mark Thomas
On 26/05/2020 21:53, Christopher Schultz wrote: > Okay, good. > > What is your JVM language? I'm guessing it's Dutch (or maybe Flemish? > French?). Tomcat doesn't have a translation for error messages and > such, so your messages are not terribly helpful (e.g. IOException with > no detail). Nope

Re: HELP wanted: Configure 2 domains, 2 SSL and 2 keyfiles on 1 VPS

2020-05-27 Thread Mark Thomas
On 26/05/2020 14:19, Maurice Poos wrote: > Hello and thank you in advance for looking into this. > > I'm a Dutch native so bare with me... > > Problem: > Trying to configure TOMCAT9 to handle 2 domains on the same server with > https and 2 different keystore files. > There is no APACHE webserver