book

Professional Apache Tomcat 6

Name: Professional Apache Tomcat 6
ISBN: 9780471753612

by Vivek Chopra, Sing Li, Jeff Genender

August 2007

Intermediate to advanced

659 pages

18h 20m

English

Wrox

Read now

Unlock full access

Copyright
About the Authors
Credits
Introduction
What's Changed Since the Second EditionHow to Use This BookConventionsDownloads for the BookErratap2p.wrox.comCaveat
1. Apache Tomcat
1.1. Humble Beginnings: The Apache Project1.2. The Apache Software Foundation1.3. Tomcat1.3.1. Distributing Tomcat: The Apache License1.3.2. Comparison with Other Licenses1.3.2.1. GPL1.3.2.2. LGPL1.3.2.3. Other Licenses1.4. The Big Picture: Java EE1.4.1. Java APIs1.4.1.1. The Java Community Process1.4.2. The Java EE APIs1.4.3. Java EE Application Servers1.4.4. "Agree on Standards, Compete on Implementation"1.4.5. Tomcat and Application Servers1.5. Tomcat and Web Servers1.6. Summary
2. Web Applications: Servlets, JSPs, and More
2.1. A Brief History of Web Applications2.1.1. CGI Scripts: The First Mechanism for Dynamic Content2.1.2. Server Side Java: Servlets2.1.2.1. The Servlet Interface2.1.2.2. Servlet Containers2.1.2.3. Accessing Servlets2.1.2.4. Drawbacks of Servlets2.1.3. JavaServer Pages2.1.3.1. Early Web Applications: Model 1 Architecture2.1.3.2. Modern Web Development: Model 2 Architecture and Web Frameworks2.1.4. JSP Tag Libraries2.1.5. JSP EL2.1.6. MVC Architecture2.2. Using Appropriate Web Technologies2.3. Building and Distributing Web Applications2.4. Summary
3. Tomcat Installation
3.1. Installing the Java Virtual Machine3.1.1. Installing the JVM on Windows3.1.2. Installing the JVM on Linux3.1.2.1. Installing the JVM from the tar.gz File3.1.2.2. Installing the JVM Using the RPM Installer3.2. Installing Tomcat3.2.1. Deciding Which Distribution to Install3.2.2. Verifying the Downloaded File3.2.3. Tomcat Windows Installer3.2.3.1. The Service Component3.2.3.2. Finishing the Installation3.2.3.3. Setting Environment Variables3.2.3.4. Testing the Installation3.2.3.4.1. Starting the Server Manually3.2.3.4.2. Starting the Server as a Service3.2.3.4.3. Changing Service Options3.2.3.5. Viewing the Default Installation3.2.3.6. Assigning Port Numbers3.2.4. Installing Tomcat on Windows Using the ZIP File3.2.5. Installing Tomcat on Linux3.2.5.1. Viewing the Default Installation3.2.5.2. Modifying Port Numbers3.3. Building Tomcat from Source3.3.1. Do You Need to Build Tomcat from the Source Code?3.3.2. Downloading the Source Release3.3.3. Subversion Repository3.3.4. Building a Source Release3.4. The Tomcat Installation Directory3.5. Installing APR3.6. Troubleshooting and Tips3.6.1. Class Version Error3.6.2. The Port Number Is in Use3.6.3. Running Multiple Instances3.6.4. A Proxy Is Blocking Access3.7. Summary
4. Tomcat Architecture
4.1. Tomcat Directory Overview4.1.1. bin Directory4.1.2. conf Directory4.1.3. lib Directory4.1.4. logs Directory4.1.5. temp Directory4.1.6. webapps Directory4.1.7. work Directory4.2. An Overview of Tomcat Architecture4.2.1. The Server4.2.2. The Service4.2.3. The Connectors4.2.4. The Engine4.2.5. The Realm4.2.6. The Valves4.2.7. The Loggers4.2.8. The Host4.2.9. The Context4.2.10. The Remaining Classes in the Tomcat Architecture4.3. Connector Architecture4.3.1. Communication Paths4.3.2. Connector Protocols4.3.3. AJP Protocol4.3.4. HTTP Protocol4.3.5. Choosing a Connector4.3.6. AJP History4.3.7. AJP JK4.3.8. webapp4.3.9. JK24.3.10. Proxy4.4. Lifecycle4.4.1. Lifecycle Interface4.4.2. LifecycleListener Interface4.5. Configuration by Architecture4.6. Summary
5. Basic Tomcat Configuration
5.1. Tomcat 6 Configuration Essentials5.2. Files in $CATALINA_HOME/conf5.3. Basic Server Configuration5.3.1. Server Configuration via the Default server.xml5.3.1.1. The Server Component5.3.1.2. The Service Component5.3.1.3. The Connector Component5.3.2. Operating Tomcat in Application Server Configuration5.3.2.1. The Engine Component5.3.2.2. The Realm Component5.3.2.3. The Host Component5.3.3. Web Application Context Definitions5.3.3.1. The Default context.xml File5.3.4. Authentication and the tomcat-users.xml File5.3.5. The Default Deployment Descriptor — web.xml5.3.5.1. Configuring the Default Servlet for Static Resources5.3.5.2. Default Directory Listings and Other Customizations5.3.6. Configuring the Invoker Servlet5.3.7. Configuring the JspServlet5.3.8. SSI and CGI Servlets Configuration5.3.9. Matching URLs: Servlet Mappings5.3.10. How server.xml, Context Descriptors, and web.xml Work Together5.3.11. SSI and CGI Mappings5.3.11.1. Session Timeout Configuration5.3.11.2. Handling Client-Side Helper Activation: Mime Mappings5.3.11.3. Simulating Apache Web Server: Welcome File Handling5.3.12. Fine-Grained Access Control: catalina.policy5.3.13. catalina.properties: Finer-Grained Control over Access Checks5.3.14. Bootstrapping Configuration5.3.15. A Final Word on Differentiating Between Configuration and Management5.4. Tomcat 6 Web-Based GUI Configurator5.5. Summary
6. Advanced Tomcat Features
6.1. Valves — Interception Tomcat-Style6.2. Standard Valves6.3. Access Log Implementation6.4. Scope of Log Files6.5. Single Sign-On Implementation6.5.1. Multiple Sign-On Without the Single Sign-On Valve6.5.2. Configuring a Single Sign-On Valve6.6. Form Authenticator Valve6.7. Restricting Access via a Request Filter6.7.1. Remote Address Filter6.7.2. Remote Host Filter6.7.3. Configuring Request Filter Valves6.7.4. Request Dumper Valve6.8. Persistent Sessions6.8.1. The Need for Persistent Sessions6.8.2. Configuring a Persistent Session Manager6.8.3. The <Manager> Element6.8.4. Hands-On Configuration with the Persistent Session Manager6.9. JNDI Resource Configuration6.9.1. What Is JNDI?6.9.2. Tomcat and JNDI6.9.3. Typical Tomcat JNDI Resources6.9.4. Configuring Resources via JNDI6.9.5. The <Environment> Element6.9.6. The <Resource> Element6.9.7. The <ResourceParams> Element6.9.8. The <ResourceLink> Element6.9.9. Configuring a JDBC DataSource6.9.10. Configuring Mail Sessions6.9.10.1. Adding a Resource Definition to the Application Context Descriptor6.9.10.2. Adding a Reference to a Mail Session Resource in the Deployment Descriptor6.9.10.3. Downloading and Installing JavaMail 1.3.3 and the JavaBeans Activation Framework 1.1 Libraries6.9.10.4. Compiling and Configuring the SendMailServlet6.9.10.5. Creating the sendmail.jsp JSP6.9.10.6. Sending E-mail via JavaMail Sessions6.10. Configuring Lifecycle Listeners6.10.1. Lifecycle Events Sent by Tomcat Components6.10.2. The <Listener> Element6.10.3. Tomcat 6 Lifecycle Listeners Configuration6.10.3.1. Displaying MBeans Created by Lifecycle Listeners Using the Manager JMX Proxy6.10.3.2. Removing Default Lifecycle Listeners6.10.3.3. Adding APR Lifecycle Listener and Native SSL Engine Configuration6.10.3.4. Initialization of the JSP Processor6.11. Summary

7. Web Application Configuration
7.1. Understanding the Contents of a Web Application7.1.1. Public Resources7.1.2. URL Mappings7.1.3. The WEB-INF Directory7.1.3.1. The classes Directory7.1.3.2. The tags Directory7.1.3.3. The lib Directory7.1.4. The META-INF Directory7.1.4.1. The Manifest File7.1.4.2. The Context File7.2. Understanding the Deployment Descriptor (web.xml)7.2.1. The Servlet 2.3-Style Deployment Descriptor7.2.1.1. The XML Header7.2.1.2. The DTD Declaration7.2.1.3. <web-app>7.2.1.4. <icon>7.2.1.5. <display-name>7.2.1.6. <description>7.2.1.7. <distributable>7.2.1.8. <context-param>7.2.1.9. <filter>7.2.1.10. <listener>7.2.1.11. <servlet>7.2.1.12. <session-config>7.2.1.13. <mime-mapping>7.2.1.14. <welcome-file-list>7.2.1.15. <error-page>7.2.1.16. <taglib>7.2.1.17. <resource-ref>7.2.1.18. <security-constraint>7.2.1.19. <web-resource-collection>7.2.1.20. <auth-constraint>7.2.1.21. <user-data-constraint>7.2.1.22. <login-config>7.2.1.23. <security-role>7.2.1.24. <env-entry>7.2.2. The Servlet 2.4/2.5-Style Deployment Descriptor7.2.2.1. web-app7.2.2.2. context-param7.2.2.3. description7.2.2.4. display-name7.2.2.5. distributable7.2.2.6. ejb-local-ref7.2.2.7. ejb-ref7.2.2.8. env-entry7.2.2.9. error-page7.2.2.10. filter7.2.2.11. filter-mapping7.2.2.12. icon7.2.2.13. jsp-config7.2.2.14. listener7.2.2.15. locale-encoding-mapping-list7.2.2.16. login-config7.2.2.17. message-destination7.2.2.18. message-destination-ref7.2.2.19. mime-mapping7.2.2.20. resource-env-ref7.2.2.21. resource-ref7.2.2.22. security-constraint7.2.2.23. security-role7.2.2.24. service-ref7.2.2.25. servlet7.2.2.26. servlet-mapping7.2.2.27. session-config7.2.2.28. welcome-file-list7.3. Summary
8. Web Application Administration
8.1. Sample Web Application8.2. Tomcat Manager Application8.2.1. Enabling Access to the Manager Application8.2.2. Manager Application Configuration8.2.2.1. Manager Application Context Entry8.2.2.2. Manager Application Deployment Descriptor8.3. Tomcat Manager: Web Interface8.3.1. Displaying Tomcat Server Status8.3.2. Managing Web Applications8.4. Deploying a Web Application8.5. Tomcat Manager: Managing Applications with Ant8.5.1. Known Issue: Failure While Undeploying Web Applications on Windows8.6. Tomcat Manager — Using HTTP Requests8.6.1. List Deployed Applications8.6.2. Deploying a New Application8.6.3. Installing/Deploying Applications in Tomcat 68.6.4. Deploying a New Application Remotely8.6.5. Deploying a New Application from a Local Path8.6.6. Reloading an Existing Application8.6.7. Listing Available JNDI Resources8.6.8. Listing OS and JVM Properties8.6.9. Stopping an Existing Application8.6.10. Starting a Stopped Application8.6.11. Undeploying a Web Application8.6.12. Displaying Session Statistics8.6.13. Querying Tomcat Internals Using the JMX Proxy Servlet8.6.14. Setting Tomcat Internals Using the JMX Proxy Servlet8.7. Possible Errors8.8. Security Considerations8.9. Tomcat Deployer8.10. Summary
9. Class Loaders
9.1. Class Loader Overview9.1.1. Standard Java SE Class Loaders9.1.1.1. Bootstrap Class Loader9.1.1.2. Extension Class Loader9.1.1.3. System Class Loader9.1.1.4. The Delegation Model9.1.1.5. Endorsed Standard Override Mechanism9.1.2. More on Class Loader Behavior9.1.2.1. Lazy Loading (Loading Classes on Demand)9.1.2.2. Class Caching9.1.2.3. Separate Namespaces9.1.3. Creating a Custom Class Loader9.1.4. Why Is a Custom Class Loader Needed for Tomcat?9.2. Security and Class Loaders9.2.1. Class Loader Delegation9.2.2. Core Class Restriction9.2.3. Separate Class Loader Namespaces9.2.4. SecurityManager9.3. Tomcat and Class Loaders9.3.1. System Class Loader9.3.2. Endorsed Standards Override Mechanism9.3.3. Common Class Loader9.3.4. Web Application Class Loader9.3.4.1. Web Application Class Loader Details9.3.4.2. Class Loader Order Revisited9.3.5. Dynamic Class Reloading9.4. Common Class Loader Pitfalls9.4.1. Packages Split Among Different Class Loaders9.4.2. Singletons9.4.3. XML Parsers9.5. Summary
10. Http Connectors
10.1. HTTP Connectors10.1.1. Tomcat 6 HTTP/1.1 Connector10.1.1.1. HTTP/1.1 Connector Configuration10.1.1.2. Configuring Tomcat 6 for SSL10.1.2. The Advanced NIO Connector10.1.3. Comet Asynchronous IO Support10.1.4. The Native APR Connector10.1.4.1. Enabling the APR Connector10.1.4.2. Configurable Connector Attributes10.1.4.3. Kernel Mode File Transfer Sendfile() Optimization10.1.4.4. Scalable Keep-Alive Poller10.1.4.5. OpenSSL Support10.2. Configuring Tomcat for CGI Support10.3. Configuring Tomcat for SSI Support10.3.1. Configuring the Tomcat 6 SSI Servlet10.3.2. Configuring the Tomcat 6 SSI Filter10.4. Running Tomcat Behind a Proxy Server10.5. Performance Tuning10.5.1. Tunable Configuration Attributes10.5.2. TCP/IP Stack Tuning Tips10.5.2.1. Windows XP or Server 2003 TCP Stack Tuning10.5.2.2. Linux TCP Stack Tuning10.6. Front-Ending Tomcat 6 with a Web Server10.7. Summary
11. Tomcat and Apache HTTP Server
11.1. The AJP Connector Architecture11.1.1. The Native Code Apache Modules11.1.2. The Apache JServ Protocol11.1.3. The AJP Connector11.2. Apache Web Server Frontend or Tomcat Standalone11.3. Understanding Tomcat Workers11.3.1. Multiple Tomcat Workers11.3.2. Configuring Apache Server to Work with Multiple Tomcat Workers — the workers.properties File11.3.2.1. Format of the workers.properties File11.3.2.2. Types of Workers11.3.2.3. Other Worker Properties11.4. Connecting Tomcat with Apache11.4.1. Tomcat 6 Configuration11.4.1.1. Configuring the AJP 1.3 Connector in server.xml11.4.2. Apache Web Server Configuration11.4.3. Using the mod_jk Module11.4.3.1. Native Code mod-jk Binaries for Apache Server11.4.3.1.1. Building mod_jk on Windows11.4.3.1.2. Building mod_jk on Linux/*nix11.4.3.2. Adding Directives to Load the mod_jk Module (httpd.conf)11.4.3.3. Additional mod_jk Directives11.4.3.4. Testing the mod_jk Setup11.4.4. Using the mod_proxy Module11.4.4.1. Configuring the mod_proxy Module on Apache 2.2.x Server for the AJP Protocol11.4.4.1.1. Installing mod_proxy on Windows/Linux11.4.4.1.2. Testing the mod_proxy Setup11.5. Configuring SSL for Apache Web Server11.5.1. Configuring mod_ssl for Apache11.5.1.1. Verifying OpenSSL Installation11.5.1.2. Building Apache with mod_ssl Support from Source11.5.1.3. Generating a Test Certificate with OpenSSL11.5.1.3.1. Configuration File for Generating a Certificate11.5.1.3.2. Create a Certificate Signing Request11.5.1.3.3. Remove the Passphrase from the Private Key11.5.1.3.4. Create a Self-Signed Certificate11.5.1.3.5. Install the Certificate11.5.1.4. Setting Up mod_ssl in Apache11.5.2. Testing the SSL-Enabled Apache Setup11.5.2.1. Browser Security Warnings11.5.3. SSL-Enabled Apache-Tomcat Setup11.6. Tomcat Load Balancing with Apache11.6.1. Changing CATALINA_HOME in the Tomcat Startup Files11.6.2. Setting Different AJP Connector Ports11.6.3. Setting Different Server Ports11.6.4. Disabling the Default HTTP/1.1 Connector11.6.5. Setting the jvmRoute in the Standalone Engine11.6.6. Commenting Out the Catalina Engine11.6.7. Directives in httpd.conf11.6.8. Workers Configuration in workers.properties11.6.8.1. Configuring Tomcat Worker Instances11.6.8.2. Configuring Load Balancer in workers.properties11.6.8.3. Configuring a Status Worker in workers.properties11.6.8.4. Supplying mod_jk with a workers.list11.6.8.5. The Complete workers.properties File11.7. Testing the Load Balancer11.7.1. Testing Sticky Sessions11.7.2. Testing Round-Robin Behavior11.7.3. Testing with Different Load Factors11.8. Summary
12. Tomcat and IIS
12.1. Role of the ISAPI Plug-in12.2. Connecting Tomcat with IIS12.2.1. Verifying Tomcat and IIS Installations12.2.2. Configuring the JK Connector12.2.3. Installing the ISAPI Plug-in12.2.4. Configuring Tomcat Workers12.2.5. Configuring the Request Forwarding Rules12.2.6. Optionally Configure URL Rewrite Rules12.2.7. Updating the Windows Registry for the ISAPI Plug-in12.2.7.1. Editing the Registry Manually12.2.7.2. Editing the Registry via a Script12.2.8. IIS 5 Isolation Mode (IIS 6 Only)12.2.9. Creating a Virtual Directory Under IIS12.2.10. Adding the ISAPI Plug-in as an IIS Filter12.2.11. Authorizing the ISAPI Plug-in as a Web Application Extension (IIS 6 Only)12.2.12. Testing the Final Setup12.3. Troubleshooting Tips12.4. Using SSL12.5. Scalable Architectures with IIS and Tomcat12.5.1. Distributing Web and Application Server Deployments12.5.2. Multiple Tomcat Workers12.5.3. Load-Balanced AJP Workers12.6. Summary
13. JDBC Connectivity
13.1. JDBC Basics13.1.1. Establishing and Terminating Connections to RDBMSs13.1.2. Evolving JDBC Versions13.1.3. JDBC Driver Types13.1.4. Database Connection Pooling13.1.5. A Problem with Connection Pooling13.1.6. Tomcat and the JDBC Evolution13.2. JNDI Emulation and Pooling in Tomcat 613.3. Preferred Configuration: JNDI Resources13.3.1. The Resource Tag13.3.1.1. Working with Other RDBMSs13.3.1.2. DBCP — Jakarta Commons Pooling Support13.3.1.3. Transactions and Distributed Transactions Support13.3.2. Hands-On JNDI Resource Configuration13.3.2.1. Creating the MySQL Test Database13.3.2.2. Setting Up the Read-Only User13.3.2.3. Adding the JDBC JNDI Resource to the Default Context13.3.2.3.1. Step 1: Adding a context.xml with JNDI<Resource>13.3.2.3.2. Step 2: Adding the <resource-ref/> Entries to web.xml13.3.2.3.3. Step 3: Using JNDI to Look Up a Data Source13.3.3. Testing the JNDI Resource Configuration13.3.3.1. The Error Page in Action13.4. Alternative JDBC Configuration13.5. Alternative Connection Pool Managers13.5.1. About the c3p0 Pool Manager13.5.2. Deploying the c3p0 Pooling Manager13.5.3. Obtaining JDBC Connections Without JNDI Lookup13.5.4. Testing Non-JNDI Pool Access with c3p013.5.5. Obtaining a Connection with JNDI Mapping13.5.6. Testing c3p0 with Tomcat 6 JNDI-Compatible Lookup13.5.7. Deploying Third-Party Pools13.6. Summary
14. Tomcat Security
14.1. Verifying Tomcat Download Integrity14.1.1. Verifying the MD5 DIGEST14.1.2. Using PGP to Verify the Download14.2. Securing the Tomcat Server Installation14.2.1. Removing Default Applications14.2.2. ROOT and tomcat-docs14.2.3. System Applications — manager and host-manager14.2.4. Tying Down System Application Access Security14.2.5. Removing JSP and Servlet Examples14.2.6. Changing the SHUTDOWN Command14.3. Running Tomcat with a Special Account14.3.1. Creating a Non-Privileged Tomcat User14.3.2. Running Tomcat with the Tomcat User14.3.2.1. Configuring Windows14.3.2.2. Configuring Linux14.4. Securing the File System14.4.1. Windows File System14.4.1.1. Access Control Lists14.4.1.2. Restricting Permissions14.4.1.3. Granting Permissions14.4.2. Linux File System14.5. Securing the Java Virtual Machine14.5.1. Overview of the Security Manager14.5.1.1. Granting Permissions to Applications14.5.1.2. Grant Entry Syntax14.5.1.3. Available Permissions14.5.1.4. Enabling the Security Manager System14.5.1.5. Advanced Security Manager Topics14.5.2. Using the Security Manager with Tomcat14.5.2.1. Enabling Tomcat's Security Manager14.5.2.2. Tomcat's Policy File14.5.2.2.1. System Code Permissions14.5.2.2.2. Catalina Code Permissions14.5.2.2.3. System Properties Access Permissions14.5.3. Recommended Security Manager Practices14.5.3.1. Using the Security Manager14.5.3.2. Understanding Application Requirements14.5.3.3. Enabling Creation of a Class Loader14.5.3.4. Enabling JDBC Drivers to Open Socket Connections to Databases14.5.3.5. Sending E-Mail with JavaMail14.5.3.6. Reading or Writing to Files Outside of the Web Application's Directory14.6. Securing Web Applications14.6.1. Authentication and Realms14.6.1.1. Authentication Mechanisms14.6.1.1.1. BASIC14.6.1.1.2. DIGEST14.6.1.1.3. Form14.6.1.1.4. HTTPS Client Certificate14.6.1.2. Configuring Authentication14.6.1.3. Authentication Form14.6.2. Security Realms14.6.2.1. Users and Roles14.6.2.2. File-Based Realm: UserDatabase14.6.2.2.1. Configuring UserDatabase14.6.2.2.2. Securing a File-Based UserDatabase Realm14.6.2.2.3. Selecting the DIGEST Algorithm14.6.2.2.4. Creating a DIGESTed Password14.6.2.2.5. Adding the DIGESTed Password to the UserDatabase Realm14.6.2.2.6. Testing the DIGESTed Password14.6.2.3. JDBC Realms14.6.2.3.1. Mapping Columns to the Required View14.6.2.3.2. Configuring JDBC Realms with Digested Passwords14.6.2.3.3. Setting up MySQL Tables14.6.2.3.4. Adding a Tomcat User to MySQL14.6.2.3.5. Defining the MySQL-Based JDBC Realm14.6.2.3.6. Testing the JDBC Realm14.6.2.4. JNDI Realms14.6.2.4.1. Configuring the JNDI Realm14.6.2.4.2. Installing the JNDI LDAP Driver14.6.2.4.3. Creating the LDAP Schema14.6.2.4.4. Populating the Directory14.6.2.4.5. Configuring the Realm14.6.2.4.6. Adding Roles and Users14.6.2.4.7. Removing a Role or a User14.6.2.5. JAAS Realm14.6.2.5.1. Configuration of a JAAS Realm14.6.2.5.2. Adding or Deleting Users and Roles14.6.2.6. Single Sign-on14.7. Encryption with SSL14.7.1. JSSE14.7.1.1. Preparing the Certificate Keystore14.7.1.2. Installing a Certificate from a Certificate Authority14.7.2. Protecting Resources with SSL14.7.2.1. Tomcat Setup14.8. Securing DefaultServlet14.8.1. Disabling Directory Listing14.8.2. Disabling an Invoker Servlet, SSI, and CGI Gateway14.9. Host Restriction14.10. Summary
15. Shared Tomcat Hosting
15.1. Virtual Hosting Concepts15.2. Virtual Hosting in Apache15.2.1. Example Deployment Scenario15.2.2. IP-Based Virtual Hosting in Apache15.2.2.1. Configuring IP-Based Virtual Hosting in Apache15.2.2.2. Testing Your Configuration15.2.2.3. Avoiding Common Mistakes15.2.3. Name-Based Virtual Hosting in Apache15.2.3.1. Configuring Name-Based Virtual Hosting in Apache15.2.3.2. Testing Your Configuration15.2.3.3. Avoiding Common Issues15.3. Virtual Hosting in Tomcat15.3.1. Example Deployment Scenario15.3.2. Tomcat as a Standalone Server15.3.2.1. Name-Based Virtual Hosting in Tomcat15.3.2.2. IP-Based Virtual Hosting in Tomcat15.3.3. Tomcat with Apache15.3.4. Configuring Apache15.4. The Tomcat Host-Manager Application15.5. Virtual Hosting Issues: Stability, Security, and Performance15.6. Tuning Virtual Hosting Settings in Tomcat15.6.1. Creating Separate JVMs for Each Virtual Host15.6.2. Setting Memory Limits on the Tomcat JVM15.6.2.1. Factors Determining Memory Requirements15.6.2.2. Setting Memory Limits in Tomcat15.6.3. Using Java Security Manager Restrictions15.7. Summary
16. Monitoring and Managing Tomcat with JMX
16.1. The Requirement to Be Manageable16.2. All About JMX16.2.1. The JMX Architecture16.2.2. Instrumentation Level16.2.3. Agent Level16.2.3.1. The MBean Server16.2.3.2. Connectors and Protocol Adapters16.2.3.3. Agent Services16.2.4. Distributed Services Level16.3. JMX Remote API16.4. An Anthology of MBeans16.4.1. Standard MBeans16.4.2. Dynamic MBeans16.4.3. Model MBeans16.4.4. Open MBeans16.5. JMX Manageable Elements in Tomcat 616.5.1. Manageable Tomcat 6 Architectural Components16.5.1.1. Service16.5.1.2. Server16.5.1.3. Engine16.5.1.4. Connector16.5.1.5. Host16.5.2. Manageable Nested Components16.5.2.1. Realm16.5.2.2. Valve16.5.2.3. Manager16.5.3. Manageable Runtime Data Objects16.5.3.1. UserDatabase16.5.3.2. User16.5.3.3. Role16.5.4. Manageable Resource Object16.5.4.1. NamingResources16.5.4.2. Environment16.5.4.3. Resource16.5.4.4. ResourceLink16.5.4.5. Exposed Application-Related Objects16.5.4.6. WebModule16.5.4.7. Servlet16.5.4.8. Exposed Internal Tomcat Objects16.5.4.9. RequestProcessor16.5.4.10. Cache16.5.4.11. ThreadPool16.6. Accessing Tomcat 6's JMX Support via the Manager Proxy16.6.1. Working with the JMX Proxy16.6.2. Modifying MBean Attributes16.6.3. Using jconsole GUI to Monitor Tomcat16.6.3.1. Connecting to the Local Running Tomcat Instance16.6.3.2. Locating the Tomcat 6 Exposed MBeans16.6.3.3. Changing Component Attribute Values via jconsole16.6.4. Configuring Tomcat for Remote Monitoring16.6.4.1. Securing the Remote Management Connection with SSL and User Authentication16.7. Summary
17. Clustering
17.1. Clustering Benefits17.1.1. Scalability and Clustering17.1.2. The Need for High Availability17.2. Clustering Basics17.2.1. Master-Backup Topological Pattern17.2.2. Fail-Over Behavioral Pattern17.3. Tomcat 6 Clustering Model17.3.1. Load Balancing17.3.1.1. mod_proxy/mod_jk Load Balancing and Sticky Sessions17.3.1.2. Understanding Sticky Sessions17.3.2. Session Sharing17.3.2.1. Sticky Sessions with No Clustered Session Sharing17.3.2.2. Sticky Sessions with a Persistence Manager and a Shared File Store17.3.2.3. Sticky Sessions with a Persistent Session Manager and a JDBC-Based Store17.3.2.4. In-Memory Session Replication17.4. Working with Tomcat 6 Clustering17.4.1. Session Management in Tomcat 617.4.2. The Role of Cookies and Modern Browsers17.4.3. Configuring a Tomcat 6 Cluster17.4.3.1. Setting Up Multiple Tomcat Instances on One Machine17.4.3.2. Shutting Down the Tomcat Cluster17.4.3.3. Configuring Minimal Web Applications17.4.3.4. Disabling the HTTP Connectors17.4.3.5. Configuring AJP TCP Ports for Clustered Tomcat Instances17.4.3.6. Setting Up jvmRoute for Each Tomcat Instance to Support mod_jk17.4.3.7. Setting the <distributable> Attribute for Web Applications17.4.3.8. Configuration Consistency17.4.4. Common Front End: Load Balancing via Apache mod_jk17.4.4.1. Apache Server Configuration17.4.4.2. mod_jk Configuration17.4.4.3. Map Path to Load Balance Working Using JkMount17.4.5. Preparation for Using Different Session-Sharing Backends17.4.6. Backend 1: In-Memory Replication Configuration17.4.6.1. Operation of the Tomcat 6 SimpleTcpCluster17.4.6.2. Cluster Session Manager Configuration with the <Cluster> Element17.4.6.2.1. Binding to a Specific Adapter on Multi-Homed Machines17.4.6.2.2. Configuring the <Cluster> Element17.4.6.2.3. Configuring DeltaManager or BackupManager17.4.6.2.4. Configuring Apache Tribes Communications Framework17.4.6.2.5. Configuring the <Membership> Subelement17.4.6.2.6. Configuring <Receiver> and <Sender> Subelements17.4.6.2.7. Configuring <Interceptor> Subelements17.4.6.3. A Replication <Valve> Element17.4.6.4. The JvmRouteBinderValve17.4.6.5. The Farm Deployer17.4.6.6. The Cluster Listeners17.4.6.7. Setting Up the Test JSP for Tomcat Session Replication17.4.6.8. Testing Tomcat 6's In-Memory Session Replication Cluster17.4.6.9. Observing HA Fail-Over17.4.6.10. Observing Load Balancing for Requests17.4.7. Backend 2: Persistent Session Manager with a Shared File Store17.4.7.1. Configuring the <Manager> Element17.4.7.2. The <Store> Nested Element17.4.7.3. Testing a Shared File System–Based Persistent Session Cluster17.4.7.4. Observing an Orderly Fail-Over17.4.7.5. Observing a Sudden Fail-Over17.4.8. Backend 3: Persistent Session Manager with a JDBC Store17.4.9. Testing a Tomcat Cluster with JDBC Persistent Session Manager Backend17.5. The Complexity of Clustering17.5.1. Clustering and Performance17.5.2. Clustering and Response Time17.5.3. Solving Performance Problems with Clustering17.6. Summary
18. Embedded Tomcat
18.1. Importance of Embedded Tomcat in Modern System Design18.1.1. Typical Embedded Application Scenarios18.1.2. Developing with Embedded Tomcat18.1.2.1. Programmatically Embedding Tomcat18.1.2.2. Running the MyWebServer Example18.2. Summary
19. Logging
19.1. Changes from Tomcat 519.2. log4j19.2.1. log4j Architecture19.2.1.1. Logger19.2.1.2. Appender19.2.1.3. Level19.2.1.4. Filter19.2.1.5. Layout19.2.2. log4j Installation and Configuration19.2.2.1. log4j Configuration19.2.2.2. Using a Simple Properties File19.2.2.3. Using log4j Programmatically19.2.2.4. Using an XML Configuration File19.2.3. A Tutorial Introduction to log4j19.2.4. More log4j Recipes19.2.4.1. Logging from a Web Application19.2.4.2. Logging to the Console19.2.4.3. Logging to a File19.2.4.4. Logging to Multiple Destinations19.2.4.5. Rolling Log Files by Size19.2.4.6. Rolling Log File by Date19.2.4.7. Separating Log Messages by Level19.2.4.8. Enabling Logging for Specific Packages or Classes in the Application19.2.4.9. Custom Formatting of Log Messages19.2.4.10. Logging Messages as HTML19.2.4.11. E-mail Log Messages19.2.4.12. Logging to the NT Event Log19.2.4.13. Adding Additional Context Information Using Nested Diagnostic Context19.2.4.14. View or Query Log Files19.2.5. log4j Performance Tips19.3. JULI19.3.1. Java Logging Architecture19.3.1.1. Logger19.3.1.2. Handler19.3.1.3. Level19.3.1.4. Filter19.3.1.5. Formatter19.3.2. A Tutorial Introduction to JULI19.4. Log Files Analysis19.5. Summary
20. Performance Testing
20.1. Performance Concepts20.1.1. What to Measure20.1.2. Scalability and Performance20.1.3. Understanding the User's Perspective20.1.4. Measuring Performance20.2. JMeter20.2.1. Installing and Running JMeter20.2.2. Making and Understanding Test Plans with JMeter20.2.3. JMeter Features20.2.3.1. Timer20.2.3.2. Listener20.2.3.2.1. Visualization Listeners20.2.3.2.2. Data Listeners20.2.3.2.3. Assertion Results20.2.3.3. Logic Controller20.2.3.3.1. Interleave Controller20.2.3.3.2. Switch Controller20.2.3.3.3. Simple Controller20.2.3.3.4. Loop Controller20.2.3.3.5. If Controller20.2.3.3.6. While Controller20.2.3.3.7. Module Controller20.2.3.3.8. Once Only Controller20.2.3.3.9. Random Controller20.2.3.3.10. Throughput Controller20.2.3.3.11. Recording Controller20.2.3.4. Sampler20.2.3.5. Config Elements20.2.3.5.1. HTTP Header Manager20.2.3.5.2. HTTP Authorization Manager20.2.3.5.3. HTTP Cookie Manager20.2.3.5.4. HTTP Request Defaults20.2.3.6. Assertions20.2.3.7. HTTP Proxy Server20.2.4. Distributed Load Testing20.2.5. Interpreting Test Results20.2.5.1. Setting Goals and Testing Them20.2.5.2. Establishing Scalability Limitations20.2.5.3. Further Analysis20.3. Alternatives to JMeter20.4. What to Do After Performance Testing20.5. Summary
21. Performance Tuning
21.1. Performance Tuning Best Practices21.1.1. Step 1: Set Up a Test Bed21.1.2. Step 2: Test Performance and Identify the Baseline21.1.3. Step 3: Diagnose Performance Bottlenecks21.2. Diagnosing Tomcat Performance Issues21.3. Tomcat Performance Tuning Tips21.3.1. Tuning the JVM Parameters21.3.1.1. Considering the Server VM21.3.1.2. Optimizing Memory Allocation21.3.1.3. Choosing a Different Vendor's JVM21.3.2. Precompiling JSPs21.3.3. Tuning Tomcat Configuration21.3.3.1. Adjusting Connector Settings21.3.3.2. The New High-Performance Connectors21.3.3.2.1. APR Connectors21.3.3.2.2. Tuning APR Connectors21.3.3.2.3. NIO Connectors21.3.3.2.4. Tuning NIO Connectors21.3.3.3. Adjusting JSP Settings21.3.3.3.1. Turning Off JSP Reload and JSP Development Mode21.3.3.3.2. Turning On Custom Tags Pooling21.3.3.3.3. Tuning JSP Tag Body Pooling21.3.3.4. Turning Off Web Application Auto-Deploy and Reloading21.3.4. Using Web Servers for Static Content, When Appropriate21.4. Summary
A. Tomcat and IDEs
A.1. EclipseA.1.1. Debugging a Remote Web Application in EclipseA.1.2. Deploying and Debugging Local Web Applications Using the Sysdeo Tomcat PluginA.1.3. Deploying and Debugging Web Applications Using the Web Tools PlatformA.1.4. Managing Web Application Deployment Using Apache Ant and EclipseA.2. NetBeansA.2.1. Debugging a Remote Web Application in NetBeansA.2.2. Debugging a Web Application Inside NetBeansA.3. Summary
B. Apache Ant
B.1. Installing AntB.2. Introduction to AntB.2.1. More Command-Line OptionsB.3. Ant RecipesB.3.1. Building Web Applications with AntB.3.2. Compiling JSPsB.3.3. Reusable Ant Scripts Using Property Files and Command-Line ParametersB.3.3.1. Reusable Scripts for Different Operating Systems (Linux/Unix, Windows)B.3.3.2. Reusable Scripts for Different Environments: Development, QA, Staging, and Production SystemsB.3.4. Build LogsB.3.5. Build Notifications via E-mailB.3.6. Ant and Source Control SystemsB.3.7. Automated TestingB.4. Continuous IntegrationB.5. Ant Task ReferenceB.6. Summary

Content preview from Professional Apache Tomcat 6

Chapter 11. Tomcat and Apache HTTP Server

A typical scenario in production environments is to use Tomcat along with a Web server. In this scenario, the Web server is used as a frontend to Tomcat. The Web server serves all static content and Tomcat serves all dynamic content. Tomcat does have its own built-in HTTP server, but some administrators managing large Web server farms may insist on using a well-known and robust Web server to accept requests from the Internet. A number of Web servers can be used for this purpose (including Apache, IIS, and Netscape). This chapter describes the process of connecting the Apache Web server to Tomcat.

Tomcat can be integrated with Apache using the JK Connector. This chapter explains how to install and configure this Connector. The JK Connector uses the Apache JServ Protocol (AJP) for communication between Tomcat and the Apache Web server.

The following topics are covered in this chapter:

The AJP (Apache JServ Protocol) Connector and the JK module (mod_jk module)
The AJP Connector and the mod_proxy module
Configuring Tomcat 6 with Apache 1.3.x using mod_jk
Configuring Tomcat 6 with Apache 2.0.x using mod_jk
Configuring Tomcat 6 with Apache 2.2.x using mod_proxy
Configuration of SSL for Apache 2.2.x servers
Load balancing multiple Tomcat instances with Apache

Each of the 1.3.x, 2.0.x, and 2.2.x series of the Apache server has slightly different architecture and feature sets. A later version does not necessarily displace another, and each version has its ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9780471753612Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Professional Apache Tomcat 6

by Vivek Chopra, Sing Li, Jeff Genender

Chapter 11. Tomcat and Apache HTTP Server

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.