| [66] | 1 | <html><head><META http-equiv="Content-Type" content="text/html; charset=iso-8859-1"><title>Apache Tomcat Configuration Reference - The HTTP Connector</title><meta value="Craig R. McClanahan" name="author"><meta value="craigmcc@apache.org" name="email"><meta value="Yoav Shapira" name="author"><meta value="yoavs@apache.org" name="email"></head><body vlink="#525D76" alink="#525D76" link="#525D76" text="#000000" bgcolor="#ffffff"><table cellspacing="0" width="100%" border="0"><!--PAGE HEADER--><tr><td><!--PROJECT LOGO--><a href="http://tomcat.apache.org/"><img border="0" alt=" | 
|---|
|  | 2 | The Apache Tomcat Servlet/JSP Container | 
|---|
|  | 3 | " align="right" src="../images/tomcat.gif"></a></td><td><font face="arial,helvetica,sanserif"><h1>Apache Tomcat 6.0</h1></font></td><td><!--APACHE LOGO--><a href="http://www.apache.org/"><img border="0" alt="Apache Logo" align="right" src="../images/asf-logo.gif"></a></td></tr></table><table cellspacing="4" width="100%" border="0"><!--HEADER SEPARATOR--><tr><td colspan="2"><hr size="1" noshade></td></tr><tr><!--LEFT SIDE NAVIGATION--><td nowrap="true" valign="top" width="20%"><p><strong>Links</strong></p><ul><li><a href="../index.html">Docs Home</a></li><li><a href="index.html">Config Ref. Home</a></li></ul><p><strong>Top Level Elements</strong></p><ul><li><a href="server.html">Server</a></li><li><a href="service.html">Service</a></li></ul><p><strong>Executors</strong></p><ul><li><a href="executor.html">Executor</a></li></ul><p><strong>Connectors</strong></p><ul><li><a href="http.html">HTTP</a></li><li><a href="ajp.html">AJP</a></li></ul><p><strong>Containers</strong></p><ul><li><a href="context.html">Context</a></li><li><a href="engine.html">Engine</a></li><li><a href="host.html">Host</a></li><li><a href="cluster.html">Cluster</a></li></ul><p><strong>Nested Components</strong></p><ul><li><a href="globalresources.html">Global Resources</a></li><li><a href="loader.html">Loader</a></li><li><a href="manager.html">Manager</a></li><li><a href="realm.html">Realm</a></li><li><a href="resources.html">Resources</a></li><li><a href="valve.html">Valve</a></li></ul><p><strong>Cluster Elements</strong></p><ul><li><a href="cluster.html">Cluster</a></li><li><a href="cluster-manager.html">Manager</a></li><li><a href="cluster-channel.html">Channel</a></li><li><a href="cluster-membership.html">Channel/Membership</a></li><li><a href="cluster-sender.html">Channel/Sender</a></li><li><a href="cluster-receiver.html">Channel/Receiver</a></li><li><a href="cluster-interceptor.html">Channel/Interceptor</a></li><li><a href="cluster-valve.html">Valve</a></li><li><a href="cluster-deployer.html">Deployer</a></li><li><a href="cluster-listener.html">ClusterListener</a></li></ul><p><strong>Global Settings</strong></p><ul><li><a href="systemprops.html">System properties</a></li></ul></td><!--RIGHT SIDE MAIN BODY--><td align="left" valign="top" width="80%"><table cellspacing="4" width="100%" border="0"><tr><td valign="top" align="left"><h1>Apache Tomcat Configuration Reference</h1><h2>The HTTP Connector</h2></td><td nowrap="true" valign="top" align="right"><small><a href="printer/http.html"><img alt="Printer Friendly Version" border="0" src="../images/printer.gif"><br>print-friendly<br>version | 
|---|
|  | 4 | </a></small></td></tr></table><table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#525D76"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="Introduction"><strong>Introduction</strong></a></font></td></tr><tr><td><blockquote> | 
|---|
|  | 5 |  | 
|---|
|  | 6 | <p>The <strong>HTTP Connector</strong> element represents a | 
|---|
|  | 7 | <strong>Connector</strong> component that supports the HTTP/1.1 protocol. | 
|---|
|  | 8 | It enables Catalina to function as a stand-alone web server, in addition | 
|---|
|  | 9 | to its ability to execute servlets and JSP pages.  A particular instance | 
|---|
|  | 10 | of this component listens for connections on a specific TCP port number | 
|---|
|  | 11 | on the server.  One or more such <strong>Connectors</strong> can be | 
|---|
|  | 12 | configured as part of a single <a href="service.html">Service</a>, each | 
|---|
|  | 13 | forwarding to the associated <a href="engine.html">Engine</a> to perform | 
|---|
|  | 14 | request processing and create the response.</p> | 
|---|
|  | 15 |  | 
|---|
|  | 16 | <p>If you wish to configure the <strong>Connector</strong> that is used | 
|---|
|  | 17 | for connections to web servers using the AJP protocol (such as the | 
|---|
|  | 18 | <code>mod_jk 1.2.x</code> connector for Apache 1.3), see | 
|---|
|  | 19 | <a href="ajp.html">here</a> instead.</p> | 
|---|
|  | 20 |  | 
|---|
|  | 21 | <p>Each incoming request requires | 
|---|
|  | 22 | a thread for the duration of that request.  If more simultaneous requests | 
|---|
|  | 23 | are received than can be handled by the currently available request | 
|---|
|  | 24 | processing threads, additional threads will be created up to the | 
|---|
|  | 25 | configured maximum (the value of the <code>maxThreads</code> attribute). | 
|---|
|  | 26 | If still more simultaneous requests are received, they are stacked up | 
|---|
|  | 27 | inside the server socket created by the <strong>Connector</strong>, up to | 
|---|
|  | 28 | the configured maximum (the value of the <code>acceptCount</code> | 
|---|
|  | 29 | attribute.  Any further simultaneous requests will receive "connection | 
|---|
|  | 30 | refused" errors, until resources are available to process them.</p> | 
|---|
|  | 31 |  | 
|---|
|  | 32 | </blockquote></td></tr></table><table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#525D76"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="Attributes"><strong>Attributes</strong></a></font></td></tr><tr><td><blockquote> | 
|---|
|  | 33 |  | 
|---|
|  | 34 | <table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#828DA6"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="Common Attributes"><strong>Common Attributes</strong></a></font></td></tr><tr><td><blockquote> | 
|---|
|  | 35 |  | 
|---|
|  | 36 | <p>All implementations of <strong>Connector</strong> | 
|---|
|  | 37 | support the following attributes:</p> | 
|---|
|  | 38 |  | 
|---|
|  | 39 | <table cellpadding="5" border="1"><tr><th bgcolor="#023264" width="15%"><font color="#ffffff">Attribute</font></th><th bgcolor="#023264" width="85%"><font color="#ffffff">Description</font></th></tr><tr><td valign="center" align="left"><code>allowTrace</code></td><td valign="center" align="left"> | 
|---|
|  | 40 | <p>A boolean value which can be used to enable or disable the TRACE | 
|---|
|  | 41 | HTTP method. If not specified, this attribute is set to false.</p> | 
|---|
|  | 42 | </td></tr><tr><td valign="center" align="left"><code>emptySessionPath</code></td><td valign="center" align="left"> | 
|---|
|  | 43 | <p>If set to <code>true</code>, all paths for session cookies will be set | 
|---|
|  | 44 | to <code>/</code>. This can be useful for portlet specification implementations. | 
|---|
|  | 45 | If not specified, this attribute is set to <code>false</code>.</p> | 
|---|
|  | 46 | </td></tr><tr><td valign="center" align="left"><code>enableLookups</code></td><td valign="center" align="left"> | 
|---|
|  | 47 | <p>Set to <code>true</code> if you want calls to | 
|---|
|  | 48 | <code>request.getRemoteHost()</code> to perform DNS lookups in | 
|---|
|  | 49 | order to return the actual host name of the remote client.  Set | 
|---|
|  | 50 | to <code>false</code> to skip the DNS lookup and return the IP | 
|---|
|  | 51 | address in String form instead (thereby improving performance). | 
|---|
|  | 52 | By default, DNS lookups are enabled.</p> | 
|---|
|  | 53 | </td></tr><tr><td valign="center" align="left"><code>maxPostSize</code></td><td valign="center" align="left"> | 
|---|
|  | 54 | <p>The maximum size in bytes of the POST which will be handled by | 
|---|
|  | 55 | the container FORM URL parameter parsing. The limit can be disabled by | 
|---|
|  | 56 | setting this attribute to a value less than or equal to 0. | 
|---|
|  | 57 | If not specified, this attribute is set to 2097152 (2 megabytes).</p> | 
|---|
|  | 58 | </td></tr><tr><td valign="center" align="left"><code>maxSavePostSize</code></td><td valign="center" align="left"> | 
|---|
|  | 59 | <p>The maximum size in bytes of the POST which will be saved/buffered by | 
|---|
|  | 60 | the container during FORM or CLIENT-CERT authentication. For both types | 
|---|
|  | 61 | of authentication, the POST will be saved/buffered before the user is | 
|---|
|  | 62 | authenticated. For CLIENT-CERT authentication, the POST is buffered for | 
|---|
|  | 63 | the duration of | 
|---|
|  | 64 | the SSL handshake and the buffer emptied when the request | 
|---|
|  | 65 | is processed. For FORM authentication the POST is | 
|---|
|  | 66 | saved whilst the user | 
|---|
|  | 67 | is re-directed to the login form and is retained until the user | 
|---|
|  | 68 | successfully authenticates or the session associated with the | 
|---|
|  | 69 | authentication request expires. The limit can be disabled by setting this | 
|---|
|  | 70 | attribute to -1. Setting the attribute to | 
|---|
|  | 71 | zero will disable the saving of | 
|---|
|  | 72 | POST data during authentication | 
|---|
|  | 73 | . If not | 
|---|
|  | 74 | specified, this attribute is set | 
|---|
|  | 75 | to | 
|---|
|  | 76 | 4096 (4 kilobytes).</p> | 
|---|
|  | 77 | </td></tr><tr><td valign="center" align="left"><code>protocol</code></td><td valign="center" align="left"> | 
|---|
|  | 78 | <p> | 
|---|
|  | 79 | Sets the protocol to handle incoming traffic. | 
|---|
|  | 80 | The default value is <code>HTTP/1.1</code> and configures the | 
|---|
|  | 81 | <code>org.apache.coyote.http11.Http11Protocol</code>. This is the blocking Java connector.<br> | 
|---|
|  | 82 | If the <code>PATH(Windows)</code> or <code>LD_LIBRARY_PATH(on most unix system)</code> | 
|---|
|  | 83 | environment variables contain the Tomcat native library, the APR connector | 
|---|
|  | 84 | will automatically be configured. Please be advised that the APR connector has different | 
|---|
|  | 85 | settings for HTTPS than the default Java connector.<br> | 
|---|
|  | 86 | Other values for this attribute are, but not limited to:<br> | 
|---|
|  | 87 | <code>org.apache.coyote.http11.Http11Protocol</code> - same as HTTP/1.1<br> | 
|---|
|  | 88 | <code>org.apache.coyote.http11.Http11NioProtocol</code> - non blocking Java connector<br> | 
|---|
|  | 89 | <code>org.apache.coyote.http11.Http11AprProtocol</code> - the APR connector.<br> | 
|---|
|  | 90 | Take a look at our <a href="#Connector Comparison">Connector Comparison</a> chart. | 
|---|
|  | 91 | The configuration for both Java connectors are identical, both for http and https. <br> | 
|---|
|  | 92 | For more information on the APR connector and APR specific SSL settings please | 
|---|
|  | 93 | visit the <a href="../apr.html">APR documentation</a> | 
|---|
|  | 94 |  | 
|---|
|  | 95 | </p> | 
|---|
|  | 96 | </td></tr><tr><td valign="center" align="left"><code>proxyName</code></td><td valign="center" align="left"> | 
|---|
|  | 97 | <p>If this <strong>Connector</strong> is being used in a proxy | 
|---|
|  | 98 | configuration, configure this attribute to specify the server name | 
|---|
|  | 99 | to be returned for calls to <code>request.getServerName()</code>. | 
|---|
|  | 100 | See <a href="#Proxy Support">Proxy Support</a> for more | 
|---|
|  | 101 | information.</p> | 
|---|
|  | 102 | </td></tr><tr><td valign="center" align="left"><code>proxyPort</code></td><td valign="center" align="left"> | 
|---|
|  | 103 | <p>If this <strong>Connector</strong> is being used in a proxy | 
|---|
|  | 104 | configuration, configure this attribute to specify the server port | 
|---|
|  | 105 | to be returned for calls to <code>request.getServerPort()</code>. | 
|---|
|  | 106 | See <a href="#Proxy Support">Proxy Support</a> for more | 
|---|
|  | 107 | information.</p> | 
|---|
|  | 108 | </td></tr><tr><td valign="center" align="left"><code>redirectPort</code></td><td valign="center" align="left"> | 
|---|
|  | 109 | <p>If this <strong>Connector</strong> is supporting non-SSL | 
|---|
|  | 110 | requests, and a request is received for which a matching | 
|---|
|  | 111 | <code><security-constraint></code> requires SSL transport, | 
|---|
|  | 112 | Catalina will automatically redirect the request to the port | 
|---|
|  | 113 | number specified here.</p> | 
|---|
|  | 114 | </td></tr><tr><td valign="center" align="left"><code>SSLEnabled</code></td><td valign="center" align="left"> | 
|---|
|  | 115 | <p> | 
|---|
|  | 116 | Use this attribute to enable SSL traffic on a connector. | 
|---|
|  | 117 | To turn on SSL handshake/encryption/decryption on a connector | 
|---|
|  | 118 | set this value to <code>true</code>. | 
|---|
|  | 119 | The default value is <code>false</code>. | 
|---|
|  | 120 | When turning this value <code>true</code> you will want to set the | 
|---|
|  | 121 | <code>scheme</code> and the <code>secure</code> attributes as well | 
|---|
|  | 122 | to pass the correct <code>request.getScheme()</code> and | 
|---|
|  | 123 | <code>request.isSecure()</code> values to the servlets | 
|---|
|  | 124 | See <a href="#SSL Support">SSL Support</a> for more information. | 
|---|
|  | 125 | </p> | 
|---|
|  | 126 | </td></tr><tr><td valign="center" align="left"><code>scheme</code></td><td valign="center" align="left"> | 
|---|
|  | 127 | <p>Set this attribute to the name of the protocol you wish to have | 
|---|
|  | 128 | returned by calls to <code>request.getScheme()</code>.  For | 
|---|
|  | 129 | example, you would set this attribute to "<code>https</code>" | 
|---|
|  | 130 | for an SSL Connector.  The default value is "<code>http</code>". | 
|---|
|  | 131 | </p> | 
|---|
|  | 132 | </td></tr><tr><td valign="center" align="left"><code>secure</code></td><td valign="center" align="left"> | 
|---|
|  | 133 | <p>Set this attribute to <code>true</code> if you wish to have | 
|---|
|  | 134 | calls to <code>request.isSecure()</code> to return <code>true</code> | 
|---|
|  | 135 | for requests received by this Connector. You would want this on an | 
|---|
|  | 136 | SSL Connector or a non SSL connector that is receiving data from a | 
|---|
|  | 137 | SSL accelerator, like a crypto card, a SSL appliance or even a webserver. | 
|---|
|  | 138 | The default value is <code>false</code>.</p> | 
|---|
|  | 139 | </td></tr><tr><td valign="center" align="left"><code>URIEncoding</code></td><td valign="center" align="left"> | 
|---|
|  | 140 | <p>This specifies the character encoding used to decode the URI bytes, | 
|---|
|  | 141 | after %xx decoding the URL. If not specified, ISO-8859-1 will be used. | 
|---|
|  | 142 | </p> | 
|---|
|  | 143 | </td></tr><tr><td valign="center" align="left"><code>useBodyEncodingForURI</code></td><td valign="center" align="left"> | 
|---|
|  | 144 | <p>This specifies if the encoding specified in contentType should be used | 
|---|
|  | 145 | for URI query parameters, instead of using the URIEncoding. This | 
|---|
|  | 146 | setting is present for compatibility with Tomcat 4.1.x, where the | 
|---|
|  | 147 | encoding specified in the contentType, or explicitely set using | 
|---|
|  | 148 | Request.setCharacterEncoding method was also used for the parameters from | 
|---|
|  | 149 | the URL. The default value is <code>false</code>. | 
|---|
|  | 150 | </p> | 
|---|
|  | 151 | </td></tr><tr><td valign="center" align="left"><code>useIPVHosts</code></td><td valign="center" align="left"> | 
|---|
|  | 152 | <p>Set this attribute to <code>true</code> to cause Tomcat to use | 
|---|
|  | 153 | the IP address that the request was recieved on to determine the Host | 
|---|
|  | 154 | to send the request to.  The default value is <code>false</code>.</p> | 
|---|
|  | 155 | </td></tr><tr><td valign="center" align="left"><code>xpoweredBy</code></td><td valign="center" align="left"> | 
|---|
|  | 156 | <p>Set this attribute to <code>true</code> to cause Tomcat to advertise | 
|---|
|  | 157 | support for the Servlet specification using the header recommended in the | 
|---|
|  | 158 | specification.  The default value is <code>false</code>.</p> | 
|---|
|  | 159 | </td></tr></table> | 
|---|
|  | 160 |  | 
|---|
|  | 161 | </blockquote></td></tr></table> | 
|---|
|  | 162 |  | 
|---|
|  | 163 | <table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#828DA6"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="Standard Implementation"><strong>Standard Implementation</strong></a></font></td></tr><tr><td><blockquote> | 
|---|
|  | 164 |  | 
|---|
|  | 165 | <p> | 
|---|
|  | 166 | HTTP supports the following additional attributes (in addition to the | 
|---|
|  | 167 | common attributes listed above):</p> | 
|---|
|  | 168 |  | 
|---|
|  | 169 | <table cellpadding="5" border="1"><tr><th bgcolor="#023264" width="15%"><font color="#ffffff">Attribute</font></th><th bgcolor="#023264" width="85%"><font color="#ffffff">Description</font></th></tr><tr><td valign="center" align="left"><code>acceptCount</code></td><td valign="center" align="left"> | 
|---|
|  | 170 | <p>The maximum queue length for incoming connection requests when | 
|---|
|  | 171 | all possible request processing threads are in use.  Any requests | 
|---|
|  | 172 | received when the queue is full will be refused.  The default | 
|---|
|  | 173 | value is 10.</p> | 
|---|
|  | 174 | </td></tr><tr><td valign="center" align="left"><code>address</code></td><td valign="center" align="left"> | 
|---|
|  | 175 | <p>For servers with more than one IP address, this attribute | 
|---|
|  | 176 | specifies which address will be used for listening on the specified | 
|---|
|  | 177 | port.  By default, this port will be used on all IP addresses | 
|---|
|  | 178 | associated with the server.</p> | 
|---|
|  | 179 | </td></tr><tr><td valign="center" align="left"><code>bufferSize</code></td><td valign="center" align="left"> | 
|---|
|  | 180 | <p>The size (in bytes) of the buffer to be provided for input | 
|---|
|  | 181 | streams created by this connector.  By default, buffers of | 
|---|
|  | 182 | 2048 bytes will be provided.</p> | 
|---|
|  | 183 | </td></tr><tr><td valign="center" align="left"><code>compressableMimeType</code></td><td valign="center" align="left"> | 
|---|
|  | 184 | <p>The value is a comma separated list of MIME types for which HTTP | 
|---|
|  | 185 | compression may be used. | 
|---|
|  | 186 | The default value is <code>text/html,text/xml,text/plain</code>.</p> | 
|---|
|  | 187 | </td></tr><tr><td valign="center" align="left"><code>compression</code></td><td valign="center" align="left"> | 
|---|
|  | 188 | <p>The <strong>Connector</strong> may use HTTP/1.1 GZIP compression in | 
|---|
|  | 189 | an attempt to save server bandwidth. The acceptable values for the | 
|---|
|  | 190 | parameter is "off" (disable compression), "on" (allow compression, which | 
|---|
|  | 191 | causes text data to be compressed), "force" (forces compression in all | 
|---|
|  | 192 | cases), or a numerical integer value (which is equivalent to "on", but | 
|---|
|  | 193 | specifies the minimum amount of data before the output is compressed). If | 
|---|
|  | 194 | the content-length is not known and compression is set to "on" or more | 
|---|
|  | 195 | aggressive, the output will also be compressed. If not specified, this | 
|---|
|  | 196 | attribute is set to "off".</p> | 
|---|
|  | 197 | </td></tr><tr><td valign="center" align="left"><code>connectionLinger</code></td><td valign="center" align="left"> | 
|---|
|  | 198 | <p>The number of milliseconds during which the sockets used by this | 
|---|
|  | 199 | <strong>Connector</strong> will linger when they are closed. | 
|---|
|  | 200 | The default value is -1 (socket linger is disabled).</p> | 
|---|
|  | 201 | </td></tr><tr><td valign="center" align="left"><code>connectionTimeout</code></td><td valign="center" align="left"> | 
|---|
|  | 202 | <p>The number of milliseconds this <strong>Connector</strong> will wait, | 
|---|
|  | 203 | after accepting a connection, for the request URI line to be | 
|---|
|  | 204 | presented.  The default value is 60000 (i.e. 60 seconds).</p> | 
|---|
|  | 205 | </td></tr><tr><td valign="center" align="left"><code>executor</code></td><td valign="center" align="left"> | 
|---|
|  | 206 | <p>A reference to the name in an <a href="executor.html">Executor</a> element. | 
|---|
|  | 207 | If this attribute is enabled, and the named executor exists, the connector will | 
|---|
|  | 208 | use the executor, and all the other thread attributes will be ignored.</p> | 
|---|
|  | 209 | </td></tr><tr><td valign="center" align="left"><code>keepAliveTimeout</code></td><td valign="center" align="left"> | 
|---|
|  | 210 | <p>The number of milliseconds this <strong>Connector</strong> will wait for | 
|---|
|  | 211 | another HTTP request before closing the connection. | 
|---|
|  | 212 | The default value is to use the value that has been set for the | 
|---|
|  | 213 | connectionTimeout attribute.</p> | 
|---|
|  | 214 | </td></tr><tr><td valign="center" align="left"><code>disableUploadTimeout</code></td><td valign="center" align="left"> | 
|---|
|  | 215 | <p>This flag allows the servlet container to use a different, longer | 
|---|
|  | 216 | connection timeout while a servlet is being executed, which in the end | 
|---|
|  | 217 | allows either the servlet a longer amount of time to complete its | 
|---|
|  | 218 | execution, or a longer timeout during data upload. If not specified, | 
|---|
|  | 219 | this attribute is set to "true".</p> | 
|---|
|  | 220 | </td></tr><tr><td valign="center" align="left"><code>maxHttpHeaderSize</code></td><td valign="center" align="left"> | 
|---|
|  | 221 | <p>The maximum size of the request and response HTTP header, specified | 
|---|
|  | 222 | in bytes. | 
|---|
|  | 223 | If not specified, this attribute is set to 4096 (4 KB).</p> | 
|---|
|  | 224 | </td></tr><tr><td valign="center" align="left"><code>maxKeepAliveRequests</code></td><td valign="center" align="left"> | 
|---|
|  | 225 | <p>The maximum number of HTTP requests which can be pipelined until | 
|---|
|  | 226 | the connection is closed by the server. Setting this attribute to 1 will | 
|---|
|  | 227 | disable HTTP/1.0 keep-alive, as well as HTTP/1.1 keep-alive and | 
|---|
|  | 228 | pipelining. Setting this to -1 will allow an unlimited amount of | 
|---|
|  | 229 | pipelined or keep-alive HTTP requests. | 
|---|
|  | 230 | If not specified, this attribute is set to 100.</p> | 
|---|
|  | 231 | </td></tr><tr><td valign="center" align="left"><code>maxThreads</code></td><td valign="center" align="left"> | 
|---|
|  | 232 | <p>The maximum number of request processing threads to be created | 
|---|
|  | 233 | by this <strong>Connector</strong>, which therefore determines the | 
|---|
|  | 234 | maximum number of simultaneous requests that can be handled.  If | 
|---|
|  | 235 | not specified, this attribute is set to 40. If an executor is associated | 
|---|
|  | 236 | with this connector, this attribute is ignored as the connector will | 
|---|
|  | 237 | execute tasks using the executor rather than an internal thread pool.</p> | 
|---|
|  | 238 | </td></tr><tr><td valign="center" align="left"><code>noCompressionUserAgents</code></td><td valign="center" align="left"> | 
|---|
|  | 239 | <p>The value is a comma separated list of regular expressions matching | 
|---|
|  | 240 | user-agents of HTTP clients for which compression should not be used, | 
|---|
|  | 241 | because these clients, although they do advertise support for the | 
|---|
|  | 242 | feature, have a broken implementation. | 
|---|
|  | 243 | The default value is an empty String (regexp matching disabled).</p> | 
|---|
|  | 244 | </td></tr><tr><td valign="center" align="left"><strong><code>port</code></strong></td><td valign="center" align="left"> | 
|---|
|  | 245 | <p>The TCP port number on which this <strong>Connector</strong> | 
|---|
|  | 246 | will create a server socket and await incoming connections.  Your | 
|---|
|  | 247 | operating system will allow only one server application to listen | 
|---|
|  | 248 | to a particular port number on a particular IP address.</p> | 
|---|
|  | 249 | </td></tr><tr><td valign="center" align="left"><code>restrictedUserAgents</code></td><td valign="center" align="left"> | 
|---|
|  | 250 | <p>The value is a comma separated list of regular expressions matching | 
|---|
|  | 251 | user-agents of HTTP clients for which HTTP/1.1 or HTTP/1.0 keep alive | 
|---|
|  | 252 | should not be used, even if the clients advertise support for these | 
|---|
|  | 253 | features. | 
|---|
|  | 254 | The default value is an empty String (regexp matching disabled).</p> | 
|---|
|  | 255 | </td></tr><tr><td valign="center" align="left"><code>server</code></td><td valign="center" align="left"> | 
|---|
|  | 256 | <p>The Server header for the http response. | 
|---|
|  | 257 | Unless you are paranoid, you won't need this feature. | 
|---|
|  | 258 | </p> | 
|---|
|  | 259 | </td></tr><tr><td valign="center" align="left"><code>socketBuffer</code></td><td valign="center" align="left"> | 
|---|
|  | 260 | <p>The size (in bytes) of the buffer to be provided for socket | 
|---|
|  | 261 | output buffering. -1 can be specified to disable the use of a buffer. | 
|---|
|  | 262 | By default, a buffers of 9000 bytes will be used.</p> | 
|---|
|  | 263 | </td></tr><tr><td valign="center" align="left"><code>tcpNoDelay</code></td><td valign="center" align="left"> | 
|---|
|  | 264 | <p>If set to <code>true</code>, the TCP_NO_DELAY option will be | 
|---|
|  | 265 | set on the server socket, which improves performance under most | 
|---|
|  | 266 | circumstances.  This is set to <code>true</code> by default.</p> | 
|---|
|  | 267 | </td></tr><tr><td valign="center" align="left"><code>threadPriority</code></td><td valign="center" align="left"> | 
|---|
|  | 268 | <p>The priority of the request processing threads within the JVM. | 
|---|
|  | 269 | The default value is <code>java.lang.Thread#NORM_PRIORITY</code>. | 
|---|
|  | 270 | See the JavaDoc for the java.lang.Thread class for more details on | 
|---|
|  | 271 | what this priority means. | 
|---|
|  | 272 | </p> | 
|---|
|  | 273 | </td></tr></table> | 
|---|
|  | 274 |  | 
|---|
|  | 275 | </blockquote></td></tr></table> | 
|---|
|  | 276 |  | 
|---|
|  | 277 | <table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#828DA6"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="Nio Implementation"><strong>Nio Implementation</strong></a></font></td></tr><tr><td><blockquote> | 
|---|
|  | 278 |  | 
|---|
|  | 279 | <p>The NIO connector exposes all the low level socket properties that can be used to tune the connector. | 
|---|
|  | 280 | Most of these attributes are directly linked to the socket implementation in the JDK so you can find out | 
|---|
|  | 281 | about the actual meaning in the JDK API documentation.<br> | 
|---|
|  | 282 | <strong>Note</strong>On some JDK versions, setTrafficClass causes a problem, a work around for this is to add | 
|---|
|  | 283 | the <code>-Djava.net.preferIPv4Stack=true</code> value to your command line</p> | 
|---|
|  | 284 |  | 
|---|
|  | 285 | <table cellpadding="5" border="1"><tr><th bgcolor="#023264" width="15%"><font color="#ffffff">Attribute</font></th><th bgcolor="#023264" width="85%"><font color="#ffffff">Description</font></th></tr><tr><td valign="center" align="left"><code>useSendfile</code></td><td valign="center" align="left"> | 
|---|
|  | 286 | <p>(bool)Use this attribute to enable or disable sendfile capability. | 
|---|
|  | 287 | The default value is <code>true</code> | 
|---|
|  | 288 | </p> | 
|---|
|  | 289 | </td></tr><tr><td valign="center" align="left"><code>useExecutor</code></td><td valign="center" align="left"> | 
|---|
|  | 290 | <p>(bool)Set to true to use the NIO thread pool executor. The default value is <code>true</code>. | 
|---|
|  | 291 | If set to false, it uses a thread pool based on a stack for its execution. | 
|---|
|  | 292 | Generally, using the executor yields a little bit slower performance, but yields a better | 
|---|
|  | 293 | fairness for processing connections in a high load environment as the traffic gets queued through a | 
|---|
|  | 294 | FIFO queue. If set to true(default) then the max pool size is the <code>maxThreads</code> attribute | 
|---|
|  | 295 | and the core pool size is the <code>minSpareThreads</code>. | 
|---|
|  | 296 | This value is ignored if the <code>executor</code> attribute is present and points to a valid shared thread pool. | 
|---|
|  | 297 | </p> | 
|---|
|  | 298 | </td></tr><tr><td valign="center" align="left"><code>acceptorThreadCount</code></td><td valign="center" align="left"> | 
|---|
|  | 299 | <p>(int)The number of threads to be used to accept connections. Increase this value on a multi CPU machine, | 
|---|
|  | 300 | although you would never really need more than <code>2</code>. Also, with a lot of non keep alive connections, | 
|---|
|  | 301 | you might want to increase this value as well. Default value is <code>1</code>.</p> | 
|---|
|  | 302 | </td></tr><tr><td valign="center" align="left"><code>pollerThreadCount</code></td><td valign="center" align="left"> | 
|---|
|  | 303 | <p>(int)The number of threads to be used to run for the polling events. Default value is <code>1</code>. | 
|---|
|  | 304 | Can't see a reason to go above that. But experiment and find your own results.</p> | 
|---|
|  | 305 | </td></tr><tr><td valign="center" align="left"><code>pollerThreadPriority</code></td><td valign="center" align="left"> | 
|---|
|  | 306 | <p>(int)The priority of the poller threads. | 
|---|
|  | 307 | The default value is <code>java.lang.Thread#NORM_PRIORITY</code>. | 
|---|
|  | 308 | See the JavaDoc for the java.lang.Thread class for more details on | 
|---|
|  | 309 | what this priority means. | 
|---|
|  | 310 | </p> | 
|---|
|  | 311 | </td></tr><tr><td valign="center" align="left"><code>acceptorThreadPriority</code></td><td valign="center" align="left"> | 
|---|
|  | 312 | <p>(int)The priority of the acceptor threads. The threads used to accept new connections. | 
|---|
|  | 313 | The default value is <code>java.lang.Thread#NORM_PRIORITY</code>. | 
|---|
|  | 314 | See the JavaDoc for the java.lang.Thread class for more details on | 
|---|
|  | 315 | what this priority means. | 
|---|
|  | 316 | </p> | 
|---|
|  | 317 | </td></tr><tr><td valign="center" align="left"><code>selectorTimeout</code></td><td valign="center" align="left"> | 
|---|
|  | 318 | <p>(int)The time in milliseconds to timeout on a select() for the poller. | 
|---|
|  | 319 | This value is important, since connection clean up is done on the same thread, so dont set this | 
|---|
|  | 320 | value to an extremely high one. The default value is <code>1000</code> milliseconds.</p> | 
|---|
|  | 321 | </td></tr><tr><td valign="center" align="left"><code>useComet</code></td><td valign="center" align="left"> | 
|---|
|  | 322 | <p>(bool)Whether to allow comet servlets or not, Default value is <code>true</code>.</p> | 
|---|
|  | 323 | </td></tr><tr><td valign="center" align="left"><code>processCache</code></td><td valign="center" align="left"> | 
|---|
|  | 324 | <p>(int)The protocol handler caches Http11NioProcessor objects to speed up performance. | 
|---|
|  | 325 | This setting dictates how many of these objects get cached. | 
|---|
|  | 326 | <code>-1</code> means unlimited, default is <code>200</code>. Set this value somewhere close to your maxThreads value. | 
|---|
|  | 327 | </p> | 
|---|
|  | 328 | </td></tr><tr><td valign="center" align="left"><code>socket.directBuffer</code></td><td valign="center" align="left"> | 
|---|
|  | 329 | <p>(bool)Boolean value, whether to use direct ByteBuffers or java mapped ByteBuffers. Default is <code>false</code> | 
|---|
|  | 330 | <br>When you are using direct buffers, make sure you allocate the appropriate amount of memory for the | 
|---|
|  | 331 | direct memory space. On Sun's JDK that would be something like <code>-XX:MaxDirectMemorySize=256m</code></p> | 
|---|
|  | 332 | </td></tr><tr><td valign="center" align="left"><code>socket.rxBufSize</code></td><td valign="center" align="left"> | 
|---|
|  | 333 | <p>(int)The socket receive buffer (SO_RCVBUF) size in bytes. Default value is <code>25188</code></p> | 
|---|
|  | 334 | </td></tr><tr><td valign="center" align="left"><code>socket.txBufSize</code></td><td valign="center" align="left"> | 
|---|
|  | 335 | <p>(int)The socket send buffer (SO_SNDBUF) size in bytes. Default value is <code>43800</code></p> | 
|---|
|  | 336 | </td></tr><tr><td valign="center" align="left"><code>socket.appReadBufSize</code></td><td valign="center" align="left"> | 
|---|
|  | 337 | <p>(int)Each connection that is opened up in Tomcat get associated with a read and a write ByteBuffer | 
|---|
|  | 338 | This attribute controls the size of these buffers. By default this read buffer is sized at <code>8192</code> bytes. | 
|---|
|  | 339 | For lower concurrency, you can increase this to buffer more data. | 
|---|
|  | 340 | For an extreme amount of keep alive connections, decrease this number or increase your heap size.</p> | 
|---|
|  | 341 | </td></tr><tr><td valign="center" align="left"><code>socket.appWriteBufSize</code></td><td valign="center" align="left"> | 
|---|
|  | 342 | <p>(int)Each connection that is opened up in Tomcat get associated with a read and a write ByteBuffer | 
|---|
|  | 343 | This attribute controls the size of these buffers. By default this write buffer is sized at <code>8192</code> bytes. | 
|---|
|  | 344 | For low concurrency you can increase this to buffer more response data. | 
|---|
|  | 345 | For an extreme amount of keep alive connections, decrease this number or increase your heap size. | 
|---|
|  | 346 | <br> | 
|---|
|  | 347 | The default value here is pretty low, you should up it if you are not dealing with tens of thousands | 
|---|
|  | 348 | concurrent connections.</p> | 
|---|
|  | 349 | </td></tr><tr><td valign="center" align="left"><code>socket.bufferPool</code></td><td valign="center" align="left"> | 
|---|
|  | 350 | <p>(int)The Nio connector uses a class called NioChannel that holds elements linked to a socket. | 
|---|
|  | 351 | To reduce garbage collection, the Nio connector caches these channel objects. | 
|---|
|  | 352 | This value specifies the size of this cache. | 
|---|
|  | 353 | The default value is <code>500</code>, and represents that the cache will hold 500 NioChannel objects. | 
|---|
|  | 354 | Other values are <code>-1</code>. unlimited cache, and <code>0</code>, no cache.</p> | 
|---|
|  | 355 | </td></tr><tr><td valign="center" align="left"><code>socket.bufferPoolSize</code></td><td valign="center" align="left"> | 
|---|
|  | 356 | <p>(int)The NioChannel pool can also be size based, not used object based. The size is calculated as follows:<br> | 
|---|
|  | 357 | NioChannel <code>buffer size = read buffer size + write buffer size</code><br> | 
|---|
|  | 358 | SecureNioChannel <code>buffer size = application read buffer size + application write buffer size + network read buffer size + network write buffer size</code><br> | 
|---|
|  | 359 | The value is in bytes, the default value is <code>1024*1024*100</code> (100MB) | 
|---|
|  | 360 | </p> | 
|---|
|  | 361 | </td></tr><tr><td valign="center" align="left"><code>socket.processorCache</code></td><td valign="center" align="left"> | 
|---|
|  | 362 | <p>(int)Tomcat will cache SocketProcessor objects to reduce garbage collection. | 
|---|
|  | 363 | The integer value specifies how many objects to keep in the cache at most. | 
|---|
|  | 364 | The default is <code>500</code>. | 
|---|
|  | 365 | Other values are <code>-1</code>. unlimited cache, and <code>0</code>, no cache.</p> | 
|---|
|  | 366 | </td></tr><tr><td valign="center" align="left"><code>socket.keyCache</code></td><td valign="center" align="left"> | 
|---|
|  | 367 | <p>(int)Tomcat will cache KeyAttachment objects to reduce garbage collection. | 
|---|
|  | 368 | The integer value specifies how many objects to keep in the cache at most. | 
|---|
|  | 369 | The default is <code>500</code>. | 
|---|
|  | 370 | Other values are <code>-1</code>. unlimited cache, and <code>0</code>, no cache.</p> | 
|---|
|  | 371 | </td></tr><tr><td valign="center" align="left"><code>socket.eventCache</code></td><td valign="center" align="left"> | 
|---|
|  | 372 | <p>(int)Tomcat will cache PollerEvent objects to reduce garbage collection. | 
|---|
|  | 373 | The integer value specifies how many objects to keep in the cache at most. | 
|---|
|  | 374 | The default is <code>500</code>. | 
|---|
|  | 375 | Other values are <code>-1</code>. unlimited cache, and <code>0</code>, no cache.</p> | 
|---|
|  | 376 | </td></tr><tr><td valign="center" align="left"><code>socket.tcpNoDelay</code></td><td valign="center" align="left"> | 
|---|
|  | 377 | <p>(bool)same as the standard setting <code>tcpNoDelay</code>. Default value is <code>false</code></p> | 
|---|
|  | 378 | </td></tr><tr><td valign="center" align="left"><code>socket.soKeepAlive</code></td><td valign="center" align="left"> | 
|---|
|  | 379 | <p>(bool)Boolean value for the socket's keep alive setting (SO_KEEPALIVE). Default is <code>false</code>. </p> | 
|---|
|  | 380 | </td></tr><tr><td valign="center" align="left"><code>socket.ooBInline</code></td><td valign="center" align="left"> | 
|---|
|  | 381 | <p>(bool)Boolean value for the socket OOBINLINE setting. Default value is <code>true</code></p> | 
|---|
|  | 382 | </td></tr><tr><td valign="center" align="left"><code>socket.soReuseAddress</code></td><td valign="center" align="left"> | 
|---|
|  | 383 | <p>(bool)Boolean value for the sockets reuse address option (SO_REUSEADDR). Default value is <code>true</code></p> | 
|---|
|  | 384 | </td></tr><tr><td valign="center" align="left"><code>socket.soLingerOn</code></td><td valign="center" align="left"> | 
|---|
|  | 385 | <p>(bool)Boolean value for the sockets so linger option (SO_LINGER). Default value is <code>true</code>. | 
|---|
|  | 386 | This option is paired with the <code>soLingerTime</code> value.</p> | 
|---|
|  | 387 | </td></tr><tr><td valign="center" align="left"><code>socket.soLingerTime</code></td><td valign="center" align="left"> | 
|---|
|  | 388 | <p>(bool)Value in seconds for the sockets so linger option (SO_LINGER). Default value is <code>25</code> seconds. | 
|---|
|  | 389 | This option is paired with the soLinger value.</p> | 
|---|
|  | 390 | </td></tr><tr><td valign="center" align="left"><code>socket.soTimeout</code></td><td valign="center" align="left"> | 
|---|
|  | 391 | <p>(int)Value in milliseconds for the sockets read timeout (SO_TIMEOUT). Default value is <code>5000</code> milliseconds.</p> | 
|---|
|  | 392 | </td></tr><tr><td valign="center" align="left"><code>socket.soTrafficClass</code></td><td valign="center" align="left"> | 
|---|
|  | 393 | <p>(byte)Value between <code>0</code> and <code>255</code> for the traffic class on the socket, <code>0x04 | 0x08 | 0x010</code></p> | 
|---|
|  | 394 | </td></tr><tr><td valign="center" align="left"><code>socket.performanceConnectionTime</code></td><td valign="center" align="left"> | 
|---|
|  | 395 | <p>(int)The first value for the performance settings. Default is <code>1</code>, see <a href="http://java.sun.com/j2se/1.5.0/docs/api/java/net/Socket.html#setPerformancePreferences(int,%20int,%20int)">Socket Performance Options</a></p> | 
|---|
|  | 396 | </td></tr><tr><td valign="center" align="left"><code>socket.performanceLatency</code></td><td valign="center" align="left"> | 
|---|
|  | 397 | <p>(int)The second value for the performance settings. Default is <code>0</code>, see <a href="http://java.sun.com/j2se/1.5.0/docs/api/java/net/Socket.html#setPerformancePreferences(int,%20int,%20int)">Socket Performance Options</a></p> | 
|---|
|  | 398 | </td></tr><tr><td valign="center" align="left"><code>socket.performanceBandwidth</code></td><td valign="center" align="left"> | 
|---|
|  | 399 | <p>(int)The third value for the performance settings. Default is <code>1</code>, see <a href="http://java.sun.com/j2se/1.5.0/docs/api/java/net/Socket.html#setPerformancePreferences(int,%20int,%20int)">Socket Performance Options</a></p> | 
|---|
|  | 400 | </td></tr><tr><td valign="center" align="left"><code>selectorPool.maxSelectors</code></td><td valign="center" align="left"> | 
|---|
|  | 401 | <p>(int)The max selectors to be used in the pool, to reduce selector contention. | 
|---|
|  | 402 | Use this option when the command line <code>org.apache.tomcat.util.net.NioSelectorShared</code> value is set to false. | 
|---|
|  | 403 | Default value is <code>200</code>.</p> | 
|---|
|  | 404 | </td></tr><tr><td valign="center" align="left"><code>selectorPool.maxSpareSelectors</code></td><td valign="center" align="left"> | 
|---|
|  | 405 | <p>(int)The max spare selectors to be used in the pool, to reduce selector contention. | 
|---|
|  | 406 | When a selector is returned to the pool, the system can decide to keep it or let it be GC:ed. | 
|---|
|  | 407 | Use this option when the command line <code>org.apache.tomcat.util.net.NioSelectorShared</code> value is set to false. | 
|---|
|  | 408 | Default value is <code>-1</code> (unlimited)</p> | 
|---|
|  | 409 | </td></tr><tr><td valign="center" align="left"><code>command-line-options</code></td><td valign="center" align="left"> | 
|---|
|  | 410 | <p>The following command line options are available for the NIO connector:<br> | 
|---|
|  | 411 | <code>-Dorg.apache.tomcat.util.net.NioSelectorShared=true|false</code> - default is <code>true</code>. | 
|---|
|  | 412 | Set this value to false if you wish to use a selector for each thread. | 
|---|
|  | 413 | the property. If you do set it to false, you can control the size of the pool of selectors by using the | 
|---|
|  | 414 | selectorPool.maxSelectors attribute</p> | 
|---|
|  | 415 | </td></tr><tr><td valign="center" align="left"><code>oomParachute</code></td><td valign="center" align="left"> | 
|---|
|  | 416 | <p>(int)The NIO connector implements an OutOfMemoryError strategy called parachute. | 
|---|
|  | 417 | It holds a chunk of data as a byte array. In case of an OOM, | 
|---|
|  | 418 | this chunk of data is released and the error is reported. This will give the VM enough room | 
|---|
|  | 419 | to clean up. The <code>oomParachute</code> represent the size in bytes of the parachute(the byte array). | 
|---|
|  | 420 | The default value is <code>1024*1024</code>(1MB). | 
|---|
|  | 421 | Please note, this only works for OOM errors regarding the Java Heap space, and there is absolutely no | 
|---|
|  | 422 | guarantee that you will be able to recover at all. | 
|---|
|  | 423 | If you have an OOM outside of the Java Heap, then this parachute trick will not help. | 
|---|
|  | 424 | </p> | 
|---|
|  | 425 | </td></tr></table> | 
|---|
|  | 426 | </blockquote></td></tr></table> | 
|---|
|  | 427 |  | 
|---|
|  | 428 | </blockquote></td></tr></table><table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#525D76"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="Nested Components"><strong>Nested Components</strong></a></font></td></tr><tr><td><blockquote> | 
|---|
|  | 429 |  | 
|---|
|  | 430 | <p>None at this time.</p> | 
|---|
|  | 431 |  | 
|---|
|  | 432 | </blockquote></td></tr></table><table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#525D76"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="Special Features"><strong>Special Features</strong></a></font></td></tr><tr><td><blockquote> | 
|---|
|  | 433 |  | 
|---|
|  | 434 |  | 
|---|
|  | 435 | <table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#828DA6"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="HTTP/1.1 and HTTP/1.0 Support"><strong>HTTP/1.1 and HTTP/1.0 Support</strong></a></font></td></tr><tr><td><blockquote> | 
|---|
|  | 436 |  | 
|---|
|  | 437 | <p>This <strong>Connector</strong> supports all of the required features | 
|---|
|  | 438 | of the HTTP/1.1 protocol, as described in RFC 2616, including persistent | 
|---|
|  | 439 | connections, pipelining, expectations and chunked encoding.  If the client | 
|---|
|  | 440 | (typically a browser) supports only HTTP/1.0, the | 
|---|
|  | 441 | <strong>Connector</strong> will gracefully fall back to supporting this | 
|---|
|  | 442 | protocol as well.  No special configuration is required to enable this | 
|---|
|  | 443 | support. The <strong>Connector</strong> also supports HTTP/1.0 | 
|---|
|  | 444 | keep-alive.</p> | 
|---|
|  | 445 |  | 
|---|
|  | 446 | <p>RFC 2616 requires that HTTP servers always begin their responses with | 
|---|
|  | 447 | the highest HTTP version that they claim to support.  Therefore, this | 
|---|
|  | 448 | <strong>Connector</strong> will always return <code>HTTP/1.1</code> at | 
|---|
|  | 449 | the beginning of its responses.</p> | 
|---|
|  | 450 |  | 
|---|
|  | 451 | </blockquote></td></tr></table> | 
|---|
|  | 452 |  | 
|---|
|  | 453 |  | 
|---|
|  | 454 | <table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#828DA6"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="Proxy Support"><strong>Proxy Support</strong></a></font></td></tr><tr><td><blockquote> | 
|---|
|  | 455 |  | 
|---|
|  | 456 | <p>The <code>proxyName</code> and <code>proxyPort</code> attributes can | 
|---|
|  | 457 | be used when Tomcat is run behind a proxy server.  These attributes | 
|---|
|  | 458 | modify the values returned to web applications that call the | 
|---|
|  | 459 | <code>request.getServerName()</code> and <code>request.getServerPort()</code> | 
|---|
|  | 460 | methods, which are often used to construct absolute URLs for redirects. | 
|---|
|  | 461 | Without configuring these attributes, the values returned would reflect | 
|---|
|  | 462 | the server name and port on which the connection from the proxy server | 
|---|
|  | 463 | was received, rather than the server name and port to whom the client | 
|---|
|  | 464 | directed the original request.</p> | 
|---|
|  | 465 |  | 
|---|
|  | 466 | <p>For more information, see the | 
|---|
|  | 467 | <a href="../proxy-howto.html">Proxy Support HOW-TO</a>.</p> | 
|---|
|  | 468 |  | 
|---|
|  | 469 | </blockquote></td></tr></table> | 
|---|
|  | 470 |  | 
|---|
|  | 471 |  | 
|---|
|  | 472 |  | 
|---|
|  | 473 | <table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#828DA6"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="SSL Support"><strong>SSL Support</strong></a></font></td></tr><tr><td><blockquote> | 
|---|
|  | 474 |  | 
|---|
|  | 475 | <p>You can enable SSL support for a particular instance of this | 
|---|
|  | 476 | <strong>Connector</strong> by setting the <code>secure</code> attribute to | 
|---|
|  | 477 | <code>true</code>.  In addition, you may need to configure the following | 
|---|
|  | 478 | attributes:</p> | 
|---|
|  | 479 |  | 
|---|
|  | 480 | <table cellpadding="5" border="1"><tr><th bgcolor="#023264" width="15%"><font color="#ffffff">Attribute</font></th><th bgcolor="#023264" width="85%"><font color="#ffffff">Description</font></th></tr><tr><td valign="center" align="left"><code>algorithm</code></td><td valign="center" align="left"> | 
|---|
|  | 481 | <p>The certificate encoding algorithm to be used. This defaults to the Sun | 
|---|
|  | 482 | implementation (<code>SunX509</code>). For IBM JVMs you should use the | 
|---|
|  | 483 | value <code>IbmX509</code>. For other vendors, consult the JVM | 
|---|
|  | 484 | documentation for the correct value.</p> | 
|---|
|  | 485 | </td></tr><tr><td valign="center" align="left"><code>clientAuth</code></td><td valign="center" align="left"> | 
|---|
|  | 486 | <p>Set to <code>true</code> if you want the SSL stack to require a | 
|---|
|  | 487 | valid certificate chain from the client before accepting a connection. | 
|---|
|  | 488 | Set to <code>want</code> if you want the SSL stack to request a client | 
|---|
|  | 489 | Certificate, but not fail if one isn't presented. A <code>false</code> | 
|---|
|  | 490 | value (which is the default) will not require a certificate chain | 
|---|
|  | 491 | unless the client requests a resource protected by a security | 
|---|
|  | 492 | constraint that uses <code>CLIENT-CERT</code> authentication. See the | 
|---|
|  | 493 | <a href="../ssl-howto.html">SSL HowTo</a> for an example.</p> | 
|---|
|  | 494 | </td></tr><tr><td valign="center" align="left"><code>keystoreFile</code></td><td valign="center" align="left"> | 
|---|
|  | 495 | <p>The pathname of the keystore file where you have stored the | 
|---|
|  | 496 | server certificate to be loaded.  By default, the pathname is | 
|---|
|  | 497 | the file "<code>.keystore</code>" in the operating system home | 
|---|
|  | 498 | directory of the user that is running Tomcat. If your | 
|---|
|  | 499 | <code>keystoreType</code> doesn't need a file use <code>""</code> | 
|---|
|  | 500 | (empty string) for this parameter.</p> | 
|---|
|  | 501 | </td></tr><tr><td valign="center" align="left"><code>keystorePass</code></td><td valign="center" align="left"> | 
|---|
|  | 502 | <p>The password used to access the server certificate from the | 
|---|
|  | 503 | specified keystore file.  The default value is "<code>changeit</code>". | 
|---|
|  | 504 | </p> | 
|---|
|  | 505 | </td></tr><tr><td valign="center" align="left"><code>keystoreType</code></td><td valign="center" align="left"> | 
|---|
|  | 506 | <p>The type of keystore file to be used for the server certificate. | 
|---|
|  | 507 | If not specified, the default value is "<code>JKS</code>".</p> | 
|---|
|  | 508 | </td></tr><tr><td valign="center" align="left"><code>keystoreProvider</code></td><td valign="center" align="left"> | 
|---|
|  | 509 | <p>The name of the keystore provider to be used for the server | 
|---|
|  | 510 | certificate. If not specified, the list of registered providers is | 
|---|
|  | 511 | traversed in preference order and the first provider that supports the | 
|---|
|  | 512 | <code>keystoreType</code> is used. | 
|---|
|  | 513 | </p> | 
|---|
|  | 514 | </td></tr><tr><td valign="center" align="left"><code>sslProtocol</code></td><td valign="center" align="left"> | 
|---|
|  | 515 | <p>The version of the SSL protocol to use.  If not specified, | 
|---|
|  | 516 | the default is "<code>TLS</code>".</p> | 
|---|
|  | 517 | </td></tr><tr><td valign="center" align="left"><code>ciphers</code></td><td valign="center" align="left"> | 
|---|
|  | 518 | <p>A comma seperated list of the encryption ciphers that may be used. | 
|---|
|  | 519 | If not specified, then any available cipher may be used.</p> | 
|---|
|  | 520 | </td></tr><tr><td valign="center" align="left"><code>keyAlias</code></td><td valign="center" align="left"> | 
|---|
|  | 521 | <p>The alias used to for the server certificate in the keystore. If not | 
|---|
|  | 522 | specified the first key read in the keystore will be used.</p> | 
|---|
|  | 523 | </td></tr><tr><td valign="center" align="left"><code>truststoreFile</code></td><td valign="center" align="left"> | 
|---|
|  | 524 | <p>The TrustStore file to use to validate client certificates.</p> | 
|---|
|  | 525 | </td></tr><tr><td valign="center" align="left"><code>truststorePass</code></td><td valign="center" align="left"> | 
|---|
|  | 526 | <p>The password to access the TrustStore. This defaults to the value | 
|---|
|  | 527 | of <code>keystorePass</code>.</p> | 
|---|
|  | 528 | </td></tr><tr><td valign="center" align="left"><code>truststoreType</code></td><td valign="center" align="left"> | 
|---|
|  | 529 | <p>Add this element if your are using a different format for the | 
|---|
|  | 530 | TrustStore then you are using for the KeyStore.</p> | 
|---|
|  | 531 | </td></tr><tr><td valign="center" align="left"><code>truststoreProvider</code></td><td valign="center" align="left"> | 
|---|
|  | 532 | <p>The name of the truststore provider to be used for the server | 
|---|
|  | 533 | certificate. If not specified, the list of registered providers is | 
|---|
|  | 534 | traversed in preference order and the first provider that supports the | 
|---|
|  | 535 | <code>truststoreType</code> is used. | 
|---|
|  | 536 | </p> | 
|---|
|  | 537 | </td></tr></table> | 
|---|
|  | 538 |  | 
|---|
|  | 539 | <p>For more information, see the | 
|---|
|  | 540 | <a href="../ssl-howto.html">SSL Configuration HOW-TO</a>.</p> | 
|---|
|  | 541 |  | 
|---|
|  | 542 | </blockquote></td></tr></table> | 
|---|
|  | 543 | <table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#828DA6"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="Connector Comparison"><strong>Connector Comparison</strong></a></font></td></tr><tr><td><blockquote> | 
|---|
|  | 544 |  | 
|---|
|  | 545 | <p>Below is a small chart that shows how the connectors differentiate.</p> | 
|---|
|  | 546 | <div align="left"><table border="0" cellpadding="0" cellspacing="4"><tr><td height="1" width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="../images/void.gif"></td><td height="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="../images/void.gif"></td><td height="1" width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="../images/void.gif"></td></tr><tr><td width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="../images/void.gif"></td><td height="1" bgcolor="#ffffff"><pre> | 
|---|
|  | 547 | Java Blocking Connector       Java Nio Blocking Connector       APR Connector | 
|---|
|  | 548 | Classname         Http11Protocol                  Http11NioProtocol         Http11AprProtocol | 
|---|
|  | 549 | Tomcat Version   3.x 4.x 5.x 6.x                       6.x                     5.5.x 6.x | 
|---|
|  | 550 | Support Polling         NO                             YES                        YES | 
|---|
|  | 551 | Polling Size           N/A                   Unlimited - Restricted by mem        Unlimited | 
|---|
|  | 552 | Read HTTP Request     Blocking                     Blocking                       Blocking | 
|---|
|  | 553 | Read HTTP Body        Blocking                     Blocking                       Blocking | 
|---|
|  | 554 | Write HTTP Response   Blocking                     Blocking                       Blocking | 
|---|
|  | 555 | SSL Support           Java SSL                     Java SSL                       OpenSSL | 
|---|
|  | 556 | SSL Handshake         Blocking                     Non blocking                   Blocking | 
|---|
|  | 557 | Max Connections       maxThreads                   See polling size               See polling size | 
|---|
|  | 558 |  | 
|---|
|  | 559 |  | 
|---|
|  | 560 | </pre></td><td width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="../images/void.gif"></td></tr><tr><td height="1" width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="../images/void.gif"></td><td height="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="../images/void.gif"></td><td height="1" width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="../images/void.gif"></td></tr></table></div> | 
|---|
|  | 561 |  | 
|---|
|  | 562 | </blockquote></td></tr></table> | 
|---|
|  | 563 | </blockquote></td></tr></table></td></tr><!--FOOTER SEPARATOR--><tr><td colspan="2"><hr size="1" noshade></td></tr><!--PAGE FOOTER--><tr><td colspan="2"><div align="center"><font size="-1" color="#525D76"><em> | 
|---|
|  | 564 | Copyright © 1999-2008, Apache Software Foundation | 
|---|
|  | 565 | </em></font></div></td></tr></table></body></html> | 
|---|