[prev in list] [next in list] [prev in thread] [next in thread] 

List:       jboss-user
Subject:    RE: [JBoss-user] Moving from development to production
From:       "Brian McSweeney" <brian.mcsweeney () aurium ! net>
Date:       2003-10-31 12:12:16
[Download RAW message or body]

Thanks Adrian,

Appreciate the help

-----Original Message-----
From: jboss-user-admin@lists.sourceforge.net
[mailto:jboss-user-admin@lists.sourceforge.net] On Behalf Of Adrian
Brock
Sent: 30 October 2003 16:24
To: jboss-user@lists.sourceforge.net
Subject: RE: [JBoss-user] Moving from development to production

On Thu, 2003-10-30 at 15:53, Brian McSweeney wrote:
> Thanks Adrian,
> 
> A few little questions about what you were talking about if you don't
> mind.
> 
> >> Remove those you don't need and lock down - *SECURE* those you do.
> 
> a) Does removing in general just mean removing the
> "whatever"-service.xml
> from the deploy folder?
> 
> For example, I don't think I'm using the properties-service, scheduler
> service or schedule-manager service, so would removing these
service.xml
> 
> files be recommended?
> 

Yes, more importantly you should look at what is jndi and
what ports are open.

I'm sure you don't use all the jms client connection factories
for example.

> b) How do go about securing the remaining services?
> 
> 

http://sourceforge.net/docman/?group_id=22866
The jaashowto.
Other network hardening like a firewall or ssl

Regards,
Adrian

> Also,
> 
> >> e.g. jasper development mode in the default web.xml
> 
> Do you mean in the jbossweb-tomcat41.sar/web.xml file?
> 
> I found that there's a jasper option here
> 
>   <!--   development         Is Jasper used in development mode (will
> check 
>                         for JSP modification on every access)?  [true]

>   -->
> 
> So do you mean adding an init-param as follows?
>   
>   <servlet>
>         <servlet-name>jsp</servlet-name>
>  
> <servlet-class>org.apache.jasper.servlet.JspServlet</servlet-class>
>         <init-param>
>             <param-name> development</param-name>
>             <param-value>false</param-value>
>         </init-param>
>         <init-param>
>             <param-name>logVerbosityLevel</param-name>
>             <param-value>WARNING</param-value>
>         </init-param>
>         <load-on-startup>3</load-on-startup>
>     </servlet>
> 
> 
> I know what you mean about these things being scattered about the
place!
> :-)
> That's why I was looking for some sort of document that might detail
> these 
> things.
> 
> Thanks very much for all your help though Adrian,
> Really appreciate it,
> Brian
> 
> 
> 
> -----Original Message-----
> From: jboss-user-admin@lists.sourceforge.net
> [mailto:jboss-user-admin@lists.sourceforge.net] On Behalf Of Adrian
> Brock
> Sent: 30 October 2003 14:55
> To: jboss-user@lists.sourceforge.net
> Subject: RE: [JBoss-user] Moving from development to production
> 
> If you are moving from development to production
> you should have a stress test that simulates
> your expected production usage.
> 
> That will help you understand what resources you use/need.
> 
> Before you do that, you should also try to understand
> what services you use.
> Remove those you don't need and lock down - *SECURE*
> those you do.
> 
> There are a number of flags scatter around that will
> turn off development features.
> e.g. jasper development mode in the default web.xml
> or the <debug> flag in transaction-service.xml
> 
> Make sure you have trimmed your logging as well.
> log/server.log or the console shouldn't show anything during
> normal operation. This improves performance and
> helps you to spot when you have problems.
> 
> Regards,
> Adrian
> 
> On Thu, 2003-10-30 at 14:35, Brian McSweeney wrote:
> > Hi all,
> > 
> > Having researched this a little more I've come up with the following
> > plan. Perhaps someone could tell me if it seems ok :-)
> > 
> > 1) Change the jboss memory
> > 
> > 	In %JBOSS_HOME%/bin/run.bat change the line
> > 
> > 	rem JAVA_OPTS=%JAVA_OPTS% -Xms128m -Xmx512m
> > 
> > 	to
> > 
> > 	JAVA_OPTS=%JAVA_OPTS% -Xms512m -Xmx512m
> > 
> > 	Are there any other options to configure here?
> > 
> > 
> > 2) Set database pool & prepared statement cache
> > 
> > Not sure if you should do this. I found some notes in the archive
with
> > an example mysql-ds file like this.
> > I hadn't got the pooling parameters in my mysql-ds. Should I be
> putting
> > these in? Eg:
> > 
> > <datasources>
> >     <local-tx-datasource>
> >       <jndi-name>databaseName</jndi-name>
> >  
> >
>
<connection-url>jdbc:mysql://xx.xx.xx.xx:3306/databaseName</connection-u
> > rl>
> >       <driver-class>com.mysql.jdbc.Driver</driver-class>
> >       <user-name>...</user-name>
> >       <password>...</password>
> >       <connection-property
> > name="autoReconnect">true</connection-property>
> > 
> > 	<-- prepared statement caching -->
> > 	
> > <prepared-statement-cache-size>100</prepared-statement-cache-size>
> > 
> >       <!--pooling parameters-->
> >       <min-pool-size>5</min-pool-size>
> >       <max-pool-size>50</max-pool-size>
> >       <blocking-timeout-millis>5000</blocking-timeout-millis>
> >       <idle-timeout-minutes>15</idle-timeout-minutes>
> >     </local-tx-datasource>
> > </datasources>
> > 
> > 
> > Does this look ok?
> > 
> > Any other options people might recommend?
> > 
> > Thanks,
> > Brian
> > 
> > 
> > 
> > 
> > -----Original Message-----
> > From: jboss-user-admin@lists.sourceforge.net
> > [mailto:jboss-user-admin@lists.sourceforge.net] On Behalf Of Brian
> > McSweeney
> > Sent: 29 October 2003 15:56
> > To: jboss-user@lists.sourceforge.net
> > Subject: [JBoss-user] Moving from development to production
> > 
> > Hi all,
> > 
> > I've searched the archives but couldn't find what I was looking for.
> > 
> > I'm moving towards my production server and I'd love a simple list
of
> > what to change in the configuration files for a production server.
> > 
> > My app is 
> > 
> > Struts S stateless session beans   ejb cmp entity beans   mysql
> > 
> > I'm going to run on Jboss_tomcat 3.2.2, on a windows machine with 1
> > processor, about 1 Gig of ram.
> > 
> > I'd love a list of stuff like:
> > 
> > 1) change the memory jboss can have c associated config file
> > recommended amount of memory for jboss
> > 2) change the stateless session bean pool c associated config file
> > recommended pool size
> > 3) database prepared statement caching d associated config file
> > recommended cache size
> > 
> > 
> > these are only the things I know might possibly be changed, but I'm
> sure
> > there are way more.
> > 
> > Any help at all would be much appreciated.
> > Thanks,
> > Brian
> > 
> > 
> > 
> > -------------------------------------------------------
> > This SF.net email is sponsored by: SF.net Giveback Program.
> > Does SourceForge.net help you be more productive?  Does it
> > help you create better code?   SHARE THE LOVE, and help us help
> > YOU!  Click Here: http://sourceforge.net/donate/
> > _______________________________________________
> > JBoss-user mailing list
> > JBoss-user@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/jboss-user
-- 
xxxxxxxxxxxxxxxxxxxxxxxx 
Adrian Brock
Director of Support
Back Office
JBoss Group, LLC 
xxxxxxxxxxxxxxxxxxxxxxxx 



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
JBoss-user mailing list
JBoss-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/jboss-user



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
JBoss-user mailing list
JBoss-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/jboss-user
[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic