<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>
<div>
<div>Then implement a clustered solution or only restart during a maintenance window. As Chad pointed out in the earlier messages, the containers just don't do a good enough job restarting a context. A container stop/start should take less than 30 seconds in
any case.</div>
<div><br>
</div>
<div>Paul</div>
<div><br>
</div>
</div>
</div>
<div>-----</div>
<span id="OLK_SRC_BODY_SECTION">
<div><br>
</div>
Restarting the container causes an outage though - so we'd prefer to restart the context.
<div><br>
<br>
<div class="gmail_quote">On Wed, Oct 12, 2011 at 11:10 AM, Paul Hethmon <span dir="ltr">
<<a href="mailto:paul.hethmon@clareitysecurity.com">paul.hethmon@clareitysecurity.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div style="word-wrap:break-word;color:rgb(0, 0, 0);font-size:14px;font-family:Calibri, sans-serif">
<div>
<div>
<div>Hmm, you've kind of resurrected an old thread there. But the general view is to never start/stop the context of the IdP to reload it. You fully stop/start the container (Tomcat, Jetty, etc) instead.</div>
<div><br>
</div>
<div>I will say my Tomcat settings are:</div>
<div><br>
</div>
<div>
<div>JAVA_OPTS="-server -Xms1G -Xmx2G \</div>
<div>-XX:NewSize=256M \</div>
<div>-XX:MaxPermSize=256M \</div>
<div>-XX:PermSize=128M \</div>
<div>"</div>
</div>
<div><br>
</div>
<div>Those work well for me. On a highly active server, I will go ahead and set -Xms2G instead so it goes ahead and allocates the 2G at start up.</div>
<div><br>
</div>
<div>Paul</div>
<div><br>
</div>
</div>
</div>
<div>-----</div>
<div><br>
</div>
<span>
<div>
<div></div>
<div class="h5"><span style="font-size: 13px; background-color: rgb(255, 255, 255); font-family: arial, sans-serif; ">Can this </span><span style="font-size:13px;background-color:rgb(255, 255, 255);font-family:arial, sans-serif"><span style="background-color:rgb(84, 133, 189);color:rgb(255, 255, 255);background-repeat:initial initial">memory</span></span><span style="font-size: 13px; background-color: rgb(255, 255, 255); font-family: arial, sans-serif; "> </span><span style="font-size:13px;background-color:rgb(255, 255, 255);font-family:arial, sans-serif"><span style="background-color:rgb(84, 133, 189);color:rgb(255, 255, 255);background-repeat:initial initial">leak</span></span><span style="font-size: 13px; background-color: rgb(255, 255, 255); font-family: arial, sans-serif; "> issue
be alleviated by increasing the amount of </span><span style="font-size:13px;background-color:rgb(255, 255, 255);font-family:arial, sans-serif"><span style="background-color:rgb(84, 133, 189);color:rgb(255, 255, 255);background-repeat:initial initial">memory</span></span><span style="font-size: 13px; background-color: rgb(255, 255, 255); font-family: arial, sans-serif; "> allocated
to tomcat6? We have currently:</span>
<div style="font-size:13px;background-color:rgb(255, 255, 255);font-family:arial, sans-serif">
<br>
</div>
<div style="font-size:13px;background-color:rgb(255, 255, 255);font-family:arial, sans-serif">
-Xmx512m -XX:MaxPermSize=256m</div>
<div style="font-size:13px;background-color:rgb(255, 255, 255);font-family:arial, sans-serif">
<br>
</div>
<div style="font-size:13px;background-color:rgb(255, 255, 255);font-family:arial, sans-serif">
can these values be doubled so that tomcat doesn't run out <span style="background-color:rgb(84, 133, 189);color:rgb(255, 255, 255);background-repeat:initial initial">memory</span> as quickly?</div>
<br>
<div class="gmail_quote">On Fri, Jan 7, 2011 at 7:03 AM, Jan Klever <span dir="ltr">
<<a href="mailto:klever@dfn-cert.de" target="_blank">klever@dfn-cert.de</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Am 07.01.2011 13:52, schrieb Chad La Joie:<br>
<div>> That error message only appears when you're shutting down the context.<br>
> If you're shutting down the server which in turn shuts down the context<br>
> then there is nothing to worry about. The process terminates and all<br>
> memory is freed. If you're trying to shutdown and restart the context<br>
> without stopping the server you'll have issues.<br>
<br>
</div>
OK, I can live with that. :-)<br>
<div><br>
> I'm not trying to pass the buck to Tomcat. I can't fix the logback<br>
> issue, that's not my code, but I will fix the IdP issue in v3 (it takes<br>
> a bit of a interface change). However, even if those two issues were<br>
> corrected you still couldn't start and stop the context because the<br>
> container itself does not clean up all the resource it allocates when<br>
> creating a context. If, in fact, the container did this, the issue it's<br>
> currently warning of (which, again, I agree is in fact an issue), would<br>
> also just go away because it would clean up all the threads it had<br>
> allocated.<br>
<br>
</div>
Thanks for that information. /me is happy now.<br>
<br>
8-)<br>
<font color="#888888">Jan<br>
</font>
<div>
<div></div>
<div><br>
--<br>
Jan Klever (Senior PKI Team Member), Phone <a href="tel:%2B49%2040%20808077-619" value="+4940808077619" target="_blank">
+49 40 808077-619</a><br>
<br>
DFN-CERT Services GmbH, <a href="https://www.dfn-cert.de" target="_blank">https://www.dfn-cert.de</a>, Phone <a href="tel:%2B49%2040%20808077-555" value="+4940808077555" target="_blank">+49 40 808077-555</a><br>
Sitz / Register: Hamburg, AG Hamburg, HRB 88805, Ust-IdNr.: DE 232129737<br>
Sachsenstraße 5, 20097 Hamburg / Germany, CEO: Dr. Klaus-Peter Kossakowski<br>
<br>
18. DFN Workshop "Sicherheit in vernetzten Systemen"<br>
am 15./16. Februar 2011 im Grand Hotel Elysee in Hamburg<br>
<br>
</div>
</div>
</blockquote>
</div>
<br>
<br clear="all">
<div><br>
</div>
-- <br>
<div>Roberto Ullfig - <a href="mailto:rullfig@uic.edu" target="_blank">rullfig@uic.edu</a></div>
<br>
</div>
</div>
-- To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">
users-unsubscribe@shibboleth.net</a></span></div>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.net</a><br>
</blockquote>
</div>
<br>
<br clear="all">
<div><br>
</div>
-- <br>
<div>Roberto Ullfig - <a href="mailto:rullfig@uic.edu" target="_blank">rullfig@uic.edu</a></div>
<br>
</div>
-- To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.net</a></span>
</body>
</html>