<div dir="ltr"><div dir="ltr">Hi Andy,<div><br></div><div>Wow, 12 seconds! I was pretty pleased with 30 given our current timings. That definitely gives us something to aim for - thanks for the info. I wonder what startup times others see?</div><div><br></div><div>We do already use MDQ for federated metadata but it's possible we could do more with some of our file-backed http metadata providers.</div><div><br></div><div>Moving off tomcat is also on the distant horizon but we are unfortunately wedded to this for now due to external factors.</div><div><br></div><div>Regards,</div><div><br></div><div>Max</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, 18 Oct 2023 at 16:25, Morgan, Andrew J <<a href="mailto:morgan@oregonstate.edu">morgan@oregonstate.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="msg-2430172624841758827">
<div dir="ltr">
<div style="font-family:Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
Hi Max,</div>
<div style="font-family:Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
We run IDP v4.3.0 on Debian's tomcat9 package on a VM. Nothing special. Startup time is about 12s:</div>
<div style="font-family:Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
Deployment of deployment descriptor [/etc/tomcat9/Catalina/localhost/idp.xml] has finished in [11,358] ms</div>
<div style="font-family:Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
I remember there was a huge difference in startup time when we switched to use the MetaData Query protocol (MDQ) instead of loading the full InCommon (eduGain) metadata. If you have a large metadata feed, that might the main reason for the slow start.</div>
<div style="font-family:Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
Thanks,</div>
<div style="font-family:Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
Andy</div>
<div style="font-family:Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div id="m_-2430172624841758827appendonsend"></div>
<hr style="display:inline-block;width:98%">
<div id="m_-2430172624841758827divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <<a href="mailto:users-bounces@shibboleth.net" target="_blank">users-bounces@shibboleth.net</a>> on behalf of Max Spicer via users <<a href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a>><br>
<b>Sent:</b> Wednesday, October 18, 2023 8:04 AM<br>
<b>To:</b> Shib Users <<a href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a>><br>
<b>Cc:</b> Max Spicer <<a href="mailto:max.spicer@york.ac.uk" target="_blank">max.spicer@york.ac.uk</a>><br>
<b>Subject:</b> Improving the IdP's startup time on tomcat</font>
<div> </div>
</div>
<div>
<p><span style="color:rgb(215,63,9)">[This email originated from outside of OSU. Use caution with links and attachments.]</span></p>
<div>
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div style="font-size:small">I've been looking to improve the startup time of our IdP as on tomcat it was taking around 4 minutes 30 seconds. <a href="https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199511039/Troubleshooting" target="_blank">https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199511039/Troubleshooting</a>
is very useful and the advice to run with unpacked wars immediately takes the startup time down to around 40 seconds on tomcat9.</div>
<div style="font-size:small"><br>
</div>
<div style="font-size:small">I've also looked at <a href="https://cwiki.apache.org/confluence/display/TOMCAT/HowTo+FasterStartUp" target="_blank">
https://cwiki.apache.org/confluence/display/TOMCAT/HowTo+FasterStartUp</a>. This suggests setting metadata-complete="true" in web.xml and adding an empty <absolute-ordering /> element. This takes almost another 10 seconds off the time.</div>
<div style="font-size:small"><br>
</div>
<div style="font-size:small">These last changes stop Tomcat from scanning the web application and its libraries for classes that use annotations to define components of a web application (Servlets etc.). If there is a SCI with a @HandlesTypes annotation it
also means it will not scan for classes that use annotations or interfaces specified in that annotation.</div>
<div style="font-size:small"><br>
</div>
<div style="font-size:small">Can anyone confirm whether this is a safe thing to do with the IdP application?</div>
<div style="font-size:small"><br>
</div>
<div style="font-size:small">Thanks,</div>
<div style="font-size:small"><br>
</div>
<div style="font-size:small">Max Spicer</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div></blockquote></div><div><br></div></div>