Technical Help

[...] , changes to the operating system on which Tomcat is running, and best security practices for web applications. Hardening Apache Tomcat In this section, we'll look at things you can do to tune the [...]

[...] of your Tomcat server's performance. You probably already have implemented logging in your web applications, and may not see why you should worry about configuring loggers for Tomcat's internals. [...]

[...] the best way for your site, based on factors such as the types of traffic you serve and the web applications your server runs. Before getting down to business, let's take a look at the biggest limits [...]

[...] container-managed environment. Below, you'll find some best practices to follow when writing web applications for Tomcat (or any other container-managed environment). Close All Threads If your [...]

[...] draining your server's power to process requests.  Certain automatic JVM processes, such as garbage collection and memory reallocation, can chew through memory if they occur more frequently than [...]

[...] and can be cleared out of the heap to reclaim the space they occupy. The JVM performs a garbage collection (GC) to remove these objects, reorganizing the objects remaining in the heap. The [...]

[...] two ways to mitigate this issue. The first and best method is to properly tune your JVM's garbage collection so that it does not interfere with Tomcat. There is really no reason your garbage [...]

[...] applications most likely retain references to the web application class loader, preventing garbage collection processes from clearing classes from the Permanent Generation, or PermGen. Because the [...]

[...] , including syntax elements that designate JSPs to be compiled upon the launch of a web application.  These elements should be configured on a per-application basis in "WEB-INF/web.xml& [...]

[...] If you're reading this article, you're probably already sold on Apache Tomcat as your web application server solution.  Lightweight, powerful, secure, and above all, open-source - Tomcat is easy [...]

[...] or RemoteAddrValve component). As an additional precaution, you can run the Manager Web application within a special type of Tomcat realm called the LockOut Realm.  The standard Tomcat Realm [...]

[...] . A stack trace will not show the cause, as the problem usually lies not with Tomcat, but the web application. Meanwhile, the 'incorrect' web app code causing Tomcat to run out of memory is usually [...]

[...] -Up For Linux-specific Distributions If you chose to use the RPM Package Manager to install Apache Tomcat on your Linux machine, an init script was also installed to your init.d directory to handle [...]

[...] Apache Tomcat and IBM Websphere Application Server are two vastly different products that nevertheless often [...]

[...] well-respected organizations provide third party SSL authentication services. If you're using Apache Tomcat, chances are that at least some of the data you're handling is sensitive, and SSL is an easy [...]

[...] Apache Tomcat boasts an impressive track record when it comes to security.  According to the official Apache [...]

[...] request loads effectively across the network and let the Tomcat servers focus on delivering dynamic content. Want to learn more?  There are many detailed articles about fronting Tomcat with Apache, [...]

[...] .  No one wants to experience the nerve-wracking sensation of sitting around waiting for dynamic content to load in the middle of a transaction. In this article, we'll look at some strategies you [...]

[...] using a web server in front of Tomcat to serve static content will free up more power for dynamic content. Remote client latency can be mitigated by compressing content with Apache mod_zip or Tomcat' [...]

[...] to execute servlets generated by requests, often with the help of JSP pages, allowing dynamic content to be generated much more efficiently than with a CGI script. If you want to run a high- [...]

[...] common reason why you would want this functionality is if you plan to use Apache to serve static content in front of Tomcat. This technique is intended to free up more power for dynamic page [...]

[...] - are for the most part unavoidable, although using a web server in front of Tomcat to serve static content will free up more power for dynamic content. Remote client latency can be mitigated by [...]

[...] of JSP pages. When creating a complicated site architecture with lots of mixed dynamic and static content, sometimes content that is more static than dynamic ends up being handled by JSP, when it [...]

[...] of transmission. In other words, if you're already using a web server to serve your static content, you're better off letting it handle all that, freeing up your Tomcat server to focus [...]

[...] which these processes occur by using the -Xmx and -Xms switches to control how JVM handles its heap memory. JVM garbage collection can use up valuable CPU power that you want being used to serve web [...]

[...] can stress your server's request-serving power.  Starting the JVM with a higher maximum heap memory by using the -Xmx switch will decrease the frequency with which garbage collection occurs. [...]

[...] when they need to by using the JAVA_OPTS -Xmx and -Xms switches to control how JVM handles its heap memory. If your JVM is invoking garbage collection too frequently, use the -Xmx switch to start the [...]

[...] literal cause of an Out Of Memory Error is simple: a given Tomcat instance uses up all of the heap memory allocated to it, causing an application or server crash. Thus, the errors themselves are not [...]

[...] to serve your static content, you're better off letting it handle all that, freeing up your Tomcat server to focus on its specialty - quickly generating dynamic content, and allowing it to get that [...]

[...] Manual, Automatic, and Remote At first glance, starting up the Tomcat Server is a simple task. On the other hand, when you consider that it can be accomplished in a [...]

[...] overall boost to performance.  Rather than compiling JSP code dynamically on the Tomcat server, it is possible to use JspC to pre-compile your JSP code when building your web [...]

[...] options you can enable to further secure your instances: Shutdown Port By default, Tomcat servers listen on localhost to Port 8005 for shutdown commands.  This address is configured via the [...]

[...] a little confusing for first-time users. Don't worry! To help you get SSL working with your Tomcat servers, we've assembled a simple, comprehensive, step-by-step guide to using SSL with Tomcat. From [...]

[...] proxy requests in order to balance request loads effectively across the network and let the Tomcat servers focus on delivering dynamic content. Want to learn more?  There are many detailed articles [...]

[...] that can be moved off of Tomcat and onto a web server such as Apache will help unload your Tomcat servers to do what they do best - serve dynamic content. While we're talking about auditing your [...]