tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From André Warnier ...@ice-sa.com>
Subject Re: problems with mod_proxy (apache 2.2.9) and tomcat ajp connector (6.0.18)
Date Tue, 12 May 2009 12:50:29 GMT
Michael Biebl wrote:
> Hi,
> 
> first of all, I'd like to say hi, as I'm new to the list.
> 
> I hope you can help me with the following problem I have.
> I run a stock Debian lenny installation with apache 2.2.9 and tomcat 6.0.18
> I'm using mod_proxy to forward the request to tomcat using ajp. The
> apache vhost configuration looks like this:
> 
> <VirtualHost *:80>
> 
> ...
>         ProxyRequests Off
>         ProxyVia On
>         ProxyPass /t/ ajp://localhost:8009/barcooServer/t/
>         ProxyPass /ws/ ajp://localhost:8009/barcooServer/ws/
>         ProxyPass /reports/ ajp://localhost:8009/barcooServer/reports/
>         ProxyPass / ajp://localhost:8009/barcooWebsite/
>         ProxyPassReverse / ajp://localhost:8009/barcooWebsite/
>         ProxyPassReverseCookiePath /barcooWebsite /
> ...
> 
> </VirtualHost>
> 
> The apache mpm prefork modules is used with the following configuration.
> <IfModule mpm_prefork_module>
>     StartServers          5
>     MinSpareServers       5
>     MaxSpareServers      10
>     MaxClients          200
>     MaxRequestsPerChild   0
> </IfModule>
> 
> The tomcat ajp connector configuration is as simple as
> <Connector port="8009" protocol="AJP/1.3" redirectPort="8443" />
> 
> 
> Now, when I get a lot of users access, the http connection via apache
> slows down to a crawl
> and I get a lot of the following messages in the kernel log:
> 
> [2350915.113736] __ratelimit: 11 messages suppressed
> [2350915.113742] TCPv6: Possible SYN flooding on port 8009. Dropping request.
> 
> apache and tomcat itself seem to be idling along, and the load is not
> that high on the machine.
> 
> Has anyone an idea what's going on there?
> 
It seems to be something entorely outside of Apache and Tomcat.
I'm no specialist, but a few names come to mind : iptables, denyhosts, 
SELinux ?


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message