tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Turner, John" <JTur...@AAS.com>
Subject RE: Tomcat and SSL
Date Tue, 10 Sep 2002 17:42:37 GMT

First, let me say that it wasn't my doing.  I came into the picture after
the fact.  Others much more adept than I were responsible for setting up the
first few instances, after that it was just a matter of replicating what
they had done and maintaining the status quo.  It sounds complex and messy,
but its pretty clean and versatile once all the pieces are in place.

Second, this is with an older version of Tomcat (3.1), so there's no
guarantee that the same scenario would apply to recent versions, though I
can't see why it wouldn't.

Basically, it comes down to having a server.xml for each instance, like
server-one.xml, server-two.xml, etc. and a startup script for each instance.
I suppose you could have a single startup.sh, and just pass arguments to it,
but it makes things a little easier if you just copy the startup script and
make your changes.  For example, startup-one.sh, startup-two.sh, etc.

After that, it's just a matter of keeping the ports straight so there is no
conflict, making sure the correct classpath is set for each instance, and
making sure each instance has a dedicated work area with sufficient
permissions.  All Tomcat instances are running under the same username.

There was a post yesterday that mentioned something not honoring the "port"
attribute in server.xml, so perhaps this sort of setup isn't usable with
newer versions.  There also might be some tweaking required with
mod_jk...the instances I have running are using mod_jserv, so the
configuration is a little different.

It's a very similar setup to using Tomcat for loadbalancing.  The example at
http://www.ubeans.com/tomcat has two distinct Tomcats on one machine, each
listening for requests on different ports.  The difference between the
config here and a loadbalancing config is that in my case, each of the
Tomcats is treated individually, they don't work together.

With this config, I am able to stop and start a specific Tomcat instance
without effecting any of the others.  Stopping Apache, on the other hand,
stops everyone.  Which, under certain circumstances, can be a good thing,
since I can stop everyone without having to stop every Tomcat if I need to.
The downside is that a problem with Apache is a problem for everyone.

John


> -----Original Message-----
> From: Michael Petres [mailto:mpetres@rogers.com]
> Sent: Tuesday, September 10, 2002 1:08 PM
> To: Tomcat Users List
> Subject: RE: Tomcat and SSL
> 
> 
> John,
> 
> How did you achieve this configuration. I am tasked with 
> putting something
> like this together myself and I haven't got the first clue 
> how to start... I
> have been running single instances of Tomcat successfully though...
> 
> Michael Petres
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> InnovObjX Corp.
> Web: www.innovobjx.com
> Tel: 905-729-2235 x3
> Fax: 905-729-2235
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> 
> -----Original Message-----
> From: Turner, John [mailto:JTurner@AAS.com]
> Sent: Tuesday, September 10, 2002 12:30 PM
> To: 'Tomcat Users List'
> Subject: RE: Tomcat and SSL
> 
> 
> Yes, the Tomcats are all on separate connector ports, and 
> each has their own
> server.xml, their own classpath, their own work area, and their own
> application space.
> 
> There's only one Apache, it uses name-based virtual hosts 
> (one IP address)
> and mod_jserv to direct the appropriate requests to Tomcat.
> 
> John
> 
> > -----Original Message-----
> > From: David Mossakowski [mailto:dmoss@Instinet.Com]
> > Sent: Tuesday, September 10, 2002 3:00 PM
> > To: Tomcat Users List
> > Subject: Re: Tomcat and SSL
> >
> >
> > John,
> >
> > Do you mean an actual instance that you can stop and start 
> separately
> > and which has its ports completely different from other instances?
> >
> > If so where do they get their requests from?  One Apache server with
> > multiple virtual hosts?  Or do you have multiple Apache
> > servers as well.
> >
> > Thanks,
> > d.
> >
> > Turner, John wrote:
> > > The server overhead is going to be minimal by adding a 
> second tomcat
> > > instance.  You are already using all the resources you are
> > going to use by
> > > having two applications run in one instance.  Splitting
> > them out might
> > > increase resource usage 10-20%, but I would be really
> > surprised if it was
> > > more than that.
> > >
> > > I have 13 instances of tomcat (3.1) running on a server
> > with medium to
> > > medium-high traffic, and usage is very low, relatively speaking.
> > >
> > > John Turner
> > > jturner@NOSPAM.aas.com
> > >
> > >
> > >>-----Original Message-----
> > >>From: Mario Klaver [mailto:mario.klaver@cgey.nl]
> > >>Sent: Tuesday, August 27, 2002 12:48 PM
> > >>To: tomcat-user@jakarta.apache.org
> > >>Subject: Tomcat and SSL
> > >>
> > >>
> > >>Hello all,
> > >>
> > >>I've the following question: I have two application running
> > under one
> > >>instance of tomcat. One application must run on the normal
> > >>http port (8080)
> > >>and the other must run on a secure port (8443). How is this
> > possible?
> > >>Because I enabled two connectors in server.xml and now both
> > >>applications
> > >>are available on both ports.
> > >>
> > >>One solution I can think of is to have two instances of
> > >>tomcat running (one
> > >>for the first application running on connector 8080 and the
> > >>other with the
> > >>other application and only enable ssl) but I rather donot do
> > >>that because
> > >>it will slow down my server.
> > >>
> > >>Can somebody tell me if there is another solution?
> > >>
> > >>Thanx in advance,
> > >>
> > >>Regards,
> > >>Mario
> > >>**************************************************************
> > >>**********
> > >>Mario Klaver
> > >>Senior Consultant
> > >>Cap Gemini Ernst & Young
> > >>Telecom Media Networks
> > >>Mobile: +31 (0) 6 185 134 01
> > >>Office: +32 (0) 2708 1723
> > >>Email: mario.klaver@cgey.nl
> > >>
> > >>
> > >>--
> > >>**************************************************************
> > >>**************
> > >>This message contains information that may be privileged or
> > >>confidential and
> > >>is the property of the Cap Gemini Ernst & Young Group. It is
> > >>only intended
> > >>for the person to whom it is addressed. If you are not 
> the intended
> > >>recipient, you are not authorized to read, print, retain,
> > >>copy disseminate,
> > >>distribute, or use this message or any part thereof. If you
> > >>receive this
> > >>message in error, please notify the sender immediately and
> > >>delete all copies
> > >>of this message.
> > >>**************************************************************
> > >>**************
> > >>
> > >>--
> > >>To unsubscribe, e-mail:
> > >
> > > <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
> > > For additional commands, e-mail:
> > > <mailto:tomcat-user-help@jakarta.apache.org>
> > >
> > > --
> > > To unsubscribe, e-mail:
> <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
> > For additional commands, e-mail:
> <mailto:tomcat-user-help@jakarta.apache.org>
> >
> >
> >
> 
> 
> --
> David Mossakowski              dmoss@instinet.com
> Instinet Corporation                 212.310.7275
> 
> 
> 
> **************************************************************
> **************
> <<Disclaimer>>
> 
> This message is intended only for the use of the Addressee and
> may contain information that is PRIVILEGED and/or
> CONFIDENTIAL or both.
> 
> This email is intended only for the personal and confidential use
> of the recipient(s) named above.
> 
> If the reader of this email is not an intended recipient, you have
> received this email in error and any review, dissemination,
> distribution or copying is strictly prohibited.
> 
> If you have received this email in error, please notify the sender
> immediately by return mail and permanently deleting the copy
> you received.
> 
> Thank you.
> 
> **************************************************************
> **************
> 
> 
> --
> To unsubscribe, e-mail:
> <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
> For additional commands, e-mail:
> <mailto:tomcat-user-help@jakarta.apache.org>
> 
> --
> To unsubscribe, e-mail:
> <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
> For additional commands, e-mail:
> <mailto:tomcat-user-help@jakarta.apache.org>
> 
> 
> --
> To unsubscribe, e-mail:   
<mailto:tomcat-user-unsubscribe@jakarta.apache.org>
For additional commands, e-mail:
<mailto:tomcat-user-help@jakarta.apache.org>

--
To unsubscribe, e-mail:   <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
For additional commands, e-mail: <mailto:tomcat-user-help@jakarta.apache.org>


Mime
View raw message