tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Alan Chaney <>
Subject Re: Multiple Hits to same JSP
Date Mon, 12 May 2008 21:35:46 GMT
If you have an apache server fronting this there are IP address 
controlled rate-limiting plug-ins like:


I have no experience of either of these.


Sameer Naik wrote:
> We just had one more incident today, 3000 hits total in 5 minutes! User agent in MSIE
7.0. We have a load balancer and 3 apache servers behind it. Since Apache is logging the request
in access, for sure, it is not generating flood itself. Then the culprit could be load balancer
hardware, user's buggy browser or some proxy server in between.
> From the access logs, the request seems to be coming from genuine users. User's are either
closing there browsers (no hits for some period) or logging out and trying again. The same
page works fine when they do that.
> We are analyzing logs to come up with a pattern w.r.t. user agent.
> We cannot pat ourselves for serving so many requests, because every such time, tomcat
thread count (set to 100) maxes out (we get a page), each thread borrows DB connection from
pool, DB cache size goes to 100 and due to a bug/feature in Oracle connection (round robin
feature for checking out connection), each one never gets cleaned up. so that increases sessions
on oracle database server.
> ================
> had a similar experience when I run the FireBug extension in FireFox. 
> but there was not as many as 500 requests more like 20 under some 
> circumstances. 
> /Per Jonsson 
> Christopher Schultz skrev: 
> Hash: SHA1 
> Alan, 
> Alan Chaney wrote:
> | Have you checked to see whether or not they are real requests - that 
> is,
> | coming from the web. If they are there's nothing anyone on this list 
> can
> | do... 
> Not entirely. It's possible to write a throttling filter that might be
> able to reject some of these requests... the only question is if it is
> even useful to do in the first place. The processing and memory
> requirements might outweigh the benefits of rejecting the requests in
> the first place. 
> Since all responses are 200 (success), you might just smile, say "hey,
> it's great that my web server can handle so many responses so fast with
> no errors" and sit back and relax. 
> - -chris 
> ----- Original Message ----
> From: Sameer Naik <>
> To:
> Sent: Friday, May 9, 2008 2:07:30 PM
> Subject: Multiple Hits to same JSP
> Hi,
> We are using Apache 2.0.53 + mod_jk 1.2.21 + tomcat 5.0.28 combination and seeing multiple
hits to a single JSP file in quick succession, like 500 hits in a minute from same user ID
and same IP address. Response code is 200 for all the requests. It is happening randomly from
various user agents. Did anyone encounter such scenario? Can we log something in Apache logs
to debug the issue? (We are already logging referrer, UA, byte range request values etc).
> Thanks,
> Sameer
> ________________________________
> Be a better friend, newshound, and 
> know-it-all with Yahoo! Mobile. Try it now.
>       ____________________________________________________________________________________
> Be a better friend, newshound, and 
> know-it-all with Yahoo! Mobile.  Try it now.;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
> !DSPAM:4828b47c210943033718476!

To start a new topic, e-mail:
To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message