Mailing-List: contact user-help@geronimo.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@geronimo.apache.org
Received-SPF: pass (athena.apache.org: domain of lists@nabble.com designates
 216.139.236.158 as permitted sender)
Message-ID: <19402329.post@talk.nabble.com>
Date: Tue, 9 Sep 2008 15:09:31 -0700 (PDT)
From: Radim Kolar <hsn@sendmail.cz>
To: user@geronimo.apache.org
Subject: Swap Sessions to disk
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit


I have problem with session management. Currently G stores all sessions in
memory, so after memory is exhausted, G crashes. 

Its very easy to DOS Geronimo server that way (just run ab benchmark tool
from apache) and it takes just a few minutes. Also lot of bots don't bother
with sending session cookie back - they are eating valuable server memory if
session handling is enabled for JSP page.

I propose to change tomcat session manager to manager with swap to disk
feaure. its called org.apache.catalina.session.PersistentManager and it
should be used by default and configured via portlet. Other applications
servers, like WAS, can limit number of open sessions and thus increasing
reliability.

https://issues.apache.org/jira/browse/GERONIMO-3838
-- 
View this message in context: http://www.nabble.com/Swap-Sessions-to-disk-tp19402329s134p19402329.html
Sent from the Apache Geronimo - Users mailing list archive at Nabble.com.