Improving the IdP's startup time on tomcat

[Max Spicer]

Hi Tom,

https://cwiki.apache.org/confluence/display/TOMCAT/HowTo+FasterStartUp
mentions that in Tomcat 8 you can use a <JarScanFilter> element in the
context file of a web application. Looking at
https://tomcat.apache.org/tomcat-8.0-doc/config/jar-scan-filter.html, it
would appear that we can now use the defaultTldScan attribute to disable
TLD scanning for an application without needing to maintain a list of jars
to skip. My experimentation shows that putting this in the IDP's context
file causes the TLD scanning warning and associated delay to be removed on
startup:

<Context docBase="/path/to/war/idp.war" privileged="true"
antiResourceLocking="false" swallowOutput="true">
  <JarScanner>
    <JarScanFilter defaultTldScan="false" />
  </JarScanner>
</Context>

This seems a simpler and easier to maintain approach to the one at
https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3269689345/Tomcat+10.1
and
https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199511039/Troubleshooting#Slow-startup-time
.

Regards,

Max

On Fri, 20 Oct 2023 at 15:29, Tom Zeller <tzeller at dragonacea.biz> wrote:

> We try to keep catalina.properties up-to-date in the example
> tomcat-base that we test with.
>
> Right now it skips JARs from the IdP and OP Plugin JARs, but no other
> IdP Plugin JARs at the moment.
>
> Some documentation here :
>
>
> https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3269689345/Tomcat+10.1
>
> --Tom
>
> > I have not tried to disable TLD scanning. This looks like it could save
> another 3 seconds but looks like it would complicate upgrades due to the
> need to track jars.
> --
> For Consortium Member technical support, see
> https://shibboleth.atlassian.net/wiki/x/ZYEpPw
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>


-- 
Max Spicer
Identity Systems, IT Services, University of York
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20231023/529f06b9/attachment.htm>