-
Type:
Improvement
-
Status: Resolved
-
Priority:
Minor
-
Resolution: Fixed
-
Affects Version/s: None
-
Fix Version/s: 9.3
-
Component/s: Distribution / Installers
-
Release Notes Description:
Http pools
The server.xml can be used to configure how many threads should be allocated byTomcat.
Setting correctly this configuration is critical:
- to avoid letter enter more threads than available connections
- to avoid DOS
We should allow to configure at least 2 critical parameters:
- the number of http threads (maxThreads)
- the queue size (acceptCount)
see: https://tomcat.apache.org/tomcat-7.0-doc/config/http.html#Standard_Implementation
Security concerns
The default server.xml should be as secured as possible
XXX Remi => here you go (secure cookie flag ?, timeout, remove AJP connector, remove default webapps
