book

Tomcat: The Definitive Guide, 2nd Edition

by Jason Brittain, Ian F. Darwin

October 2007

Intermediate to advanced

496 pages

16h 50m

English

O'Reilly Media, Inc.

Read now

Unlock full access

What's This Book About?
Jason Brittain's AcknowledgmentsIan Darwin's Acknowledgments

Installing TomcatInstalling Tomcat on LinuxInstalling Tomcat from an Apache multiplatform binary releaseInstalling Tomcat from this book's Linux RPM packagesInstalling Tomcat from the JPackage.org Linux RPM packagesInstalling Tomcat on SolarisInstalling Tomcat on WindowsInstalling Tomcat on Mac OS XInstalling Tomcat on FreeBSD
Starting Up and Shutting DownEnvironment variablesStarting and stopping: The general caseStarting and stopping on LinuxStarting and stopping on SolarisStarting and stopping on WindowsStarting and stopping on Mac OS XStarting and stopping on FreeBSDCommon ErrorsRestarting TomcatThe general caseRestarting Tomcat on LinuxRestarting Tomcat on SolarisRestarting the Tomcat Windows ServiceRestarting Tomcat on Mac OS XRestarting Tomcat on FreeBSD
Automatic Startup on LinuxAutomatic Startup on SolarisAutomatic Startup on WindowsAutomatic Startup on Mac OS XAutomatic Startup on FreeBSD
A Word About Using the Apache Web Server
Relaying Port 80 TCP Connections to Port 8080Running Tomcat on Port 80 via a Service WrapperCommon Errors
RealmsUserDatabaseRealmJDBCRealmJNDIRealmJAASRealmContainer-Managed SecurityBasic authenticationDigest authenticationForm authenticationClient-cert authenticationSingle Sign-on
Session PersistenceStandardManagerPersistentManagerUsing FileStore for storing sessionsUsing JDBCStore for storing sessions
JDBC DataSourcesOther JNDI Resources
HostsThe Host Manager Webapp
Deploying Servlets and JavaServer Pages
server.xml Context DeploymentContext XML Fragment File Deployment
server.xml Context DeploymentContext XML Fragment File Deployment
Building a JAR/WARDeployment via AntCopying the WAR file or webapp directoryAccessing the Manager webappThe Tomcat standalone deployerThe scp Ant TaskCommon ErrorsXML in property filesFileNotFoundExceptions
Measuring Web Server PerformanceLoad-Testing Toolsab: The Apache benchmark toolSiegeApache Jakarta JMeterWeb Server Performance ComparisonTomcat connectors and Apache httpd connector modulesBenchmarked hardware and software configurationsBenchmark procedureBenchmark results and summaryWhat else we could have benchmarked
JVM PerformanceOperating System Performance
Disabling DNS LookupsAdjusting the Number of ThreadsSpeeding Up JSPsPrecompiling JSPs by requesting themPrecompiling JSPs at webapp start timePrecompiling JSPs at build time using JspC
Anecdotal Capacity PlanningEnterprise Capacity PlanningCapacity Planning on Tomcat
The Pros and Cons of IntegrationRunning Tomcat StandaloneIt's easier to set upNo web server connector module to worry aboutTomcat standalone is faster than Apache httpd proxying requests to TomcatPotential for better securityEase of migrationEase of upgradesTomcat has less supporting softwareFewer people who know Tomcat's web serverFewer web server featuresRunning Tomcat with Apache httpdTomcat's web server is faster than Apache httpdMore support softwareFaster startup and shutdown timesMore difficult to set upTomcat dynamic content slowdownPotential for additional security holesMore complicated upgrades
Sharing the Load Using Separate Port NumbersApache httpd is oblivious to Tomcat securityTwice the web servers to tune, maintain, and secureAwkward user experience and splintered loggingTroublesome double authenticationProxying from Apache httpd to TomcatSetting Up Apache httpdSetting Up TomcatVerify That Proxying WorksDisadvantagesApache httpd slows Tomcat's response timeTwice the web servers to tune, maintain, and secureTroublesome dual authenticationSee alsoProxying from Tomcat to Apache httpdUsing the mod_jk ConnectorUsing binary releasesCompiling mod_jkStarting up the integrated serversworkers.properties
Installing APRUsing binary releasesCompiling and installing APRBuilding and Installing the APR ConnectorConfiguring Tomcat to Use the APR Connector
Securing the SystemOperating System Security ForumsConfiguring Your Network
Setting Up a chroot JailUsing a Non-Root User in the chroot Jail
VulnerabilitiesCross site scriptingHTML injectionSQL injectionCommand injectionHTTP Request FilteringInstalling the BadInputValveInstalling the BadInputFilterSee also
Generating a Self-Signed Server CertificateRequesting and Installing a Commercial CertificateSetting Up an SSL Connector for TomcatConfiguring the JIO connector for SSLConfiguring the APR connector for SSLConfiguring the NIO connector for SSLClient Certificates
server.xmlServerServiceExecutorConnectorEngineHostVirtual hostingAliasContextRealmGlobalNamingResourcesEnvironmentResourceResourceEnvRefWatchedResourceListenerLoaderManagerStoresResourcesValveControlling access logs with an access log valveRemoteHostValve and RemoteAddrValveLimiting request concurrency with SemaphoreValveTransactionClusterChannelMembershipSenderTransportReceiverInterceptorMemberDeployerClusterListenerMigrating from Older Versions of TomcatMigrating from 4.1 to 5.0Migrating from 5.0 to 5.5Migrating from 5.5 to 6.0
web-appicon, display-name, and descriptiondistributablecontext-paramfilter and filter-mappinglistenerservletservlet-mappingsession-configmime-mappingwelcome-file-listerror-pagejsp-config and taglibresource-env-refresource-refSee alsosecurity-constraintSee alsologin-configSee alsosecurity-roleenv-entrySee alsoejb-ref and ejb-local-refservice-refmessage-destination-refmessage-destinationlocale-encoding-mapping-list
Reading Logfiles
HTTP RequestsResponse Codes and HeadersInteracting with HTTP
Installing Apache Ant
Downloading Source CodeObtaining Source Code from Apache's Subversion Repository
Clustering Terms
DNS Request DistributionTCP NAT Request Distributionmod_proxy Load Balancing and Failover
Servlet sessionsSession affinityReplicated sessions
FeaturesConfiguring and Testing IP MulticastConfiguring All-to-All ReplicationTesting Session ReplicationConfiguring Static MembershipConfiguring Primary/Backup Replication
Supplemental ResourcesOnline Documentation That Shipped with TomcatThe Apache Tomcat Web DocumentationThe Apache Tomcat Mailing List ArchivesWeb Sites Related to This BookThird-Party Web Sites About TomcatThe #tomcat IRC ChannelThe Apache Tomcat Mailing Lists
Choosing a Java JDK

Content preview from Tomcat: The Definitive Guide, 2nd Edition

Apache Harmony JDK

As of this writing, the open source Apache Harmony JDK (http://harmony.apache.org) runs Tomcat 6.0. During light testing, we encountered no problems with Tomcat itself, however, some webapps had some trouble. It is possible that your webapp may run successfully. Unless you try your webapp running on Apache Harmony, you won't know if it works, nor will you know if it performs better or worse.

This may become mostly a nonissue for most people once Sun's JDK is available as pure open source. But, if you need to redistribute the JDK with your Tomcat and webapp(s), and if your company needs or wants to make any modifications to the JDK or to the Java core class libraries that you must keep closed, Harmony's more permissive license terms may be an important differentiating factor.

To try it out, download an archive of the Harmony JDK from http://harmony.apache.org/downloads.html. Here's how it looked when we installed Harmony on Linux:

# cd /opt
# tar zxvf ˜/harmony-jdk-linux-x86_64.tar.gz

Then, set JAVA_HOME and put Harmony's bin directory on the front of your shell's PATH:

# JAVA_HOME="/opt/harmony-jdk-r533200"
# export JAVA_HOME
# PATH=$JAVA_HOME/bin:$PATH
# export PATH
# which java
/opt/harmony-jdk-r533200/bin/java
# java -version Apache Harmony Launcher : (c) Copyright 1991, 2006 The Apache Software Foundation or i ts licensors, as applicable. java version "1.5.0" pre-alpha : not complete or compatible svn = r533200, (Apr 28 2007), Linux/em64t/gcc 3.3.3, release build ...