[help/advice] full 100% cpu load problems with tomcat7 and login webpage very slow
hi all, 
  
we are deploying the era 6 package on linux (debian 7). 
the era server is working fine (it is installed and runs without errors), to start we would like to install the webconsole on the same server (this will be split later on). 
  
as we are talking about security, we wanted to have the webconsole running over https, therefore this is what we did for the web console: 
  
downloading the era java package: 

wget hxxp://download.eset.com/download/ra/v6/standalone-installers/webconsole/era.war
setup the java packages: 

sudo apt-get install openjdk-6-jdk
setup the apache tomcat web server (version 6 and newer): 

sudo apt-get install tomcat7
copy the era.war file into the tomcat application folder: 

sudo cp era.war /var/lib/tomcat7/webapps/
restart the tomcat service to deploy era java file (autodeploy is active): 

sudo /etc/init.d/tomcat7 restart

install the library libtcnative (used by tomcat apr for the ssl/tls): 

apt-get install libtcnative-1
then, changed following lines in /etc/tomcat7/server.xml: 

<connector port="8443" protocol="org.apache.coyote.http11.http11aprprotocol"
          maxthreads="200"
          enablelookups="true" disableuploadtimeout="true"
          acceptcount="100" scheme="https" secure="true"
          sslenabled="true"
          sslprotocol="tlsv1"
          sslcertificatefile="ourcrt.crt"
          sslcertificatekeyfile="ourkey.key"
          sslcertificatechainfile="ourpem.pem"/>
uncommenting following line to enable the sslengine: 

<listener classname="org.apache.catalina.core.aprlifecyclelistener" sslengine="on" />
apply changes, restarting tomcat with: 

sudo /etc/init.d/tomcat7 restart
here the webconsole works over ssl/tls on port 8443 ! 
  
as we want to use the standard 443 port for https, we did create an iptables rule to redirect port 443 to 8443: 

iptables -t nat -a prerouting -p tcp --dport 443 -j redirect --to-port 8443
as we want to make the manager as default web app of the server, we need to add following lines to file /etc/tomcat7/server.xml inside the <host> section: 

<context path="" docbase="era">
    <watchedresource>web-inf/web.xml</watchedresource>
</context>
apply changes, restarting tomcat with: 

sudo /etc/init.d/tomcat7 restart
as iptable rules are not persistent and will be deleted when server restarts, we need to install a program that will allow us to save them and make them persistent. install iptables-persistent: 

sudo apt-get install iptables-persistent

it will ask you if you want to save actual rules, select "yes" twice and go on. this program will have created the directory /etc/iptables/ where we will store the saved rules.   
right here the webconsole is working, answering to web requests on https://ourip/(that redirects to /webconsole automatically). 
the login screens appears (well at least the graphical parts) but the little loading gif turns for minutes (we usually need to wait 15 to 20 minutes) before showing the fields and buttons ! 
after the long wait the login screen appears and works fine (the cpu load goes back to nearly nothing) and the webconsole works as it should. 
  
looking to the logs, there seems to be no errors or warnings (not in tomcat catalina, not in eset logs), but cpu load goes up to 100%(long live java) on one of the cores of the vm...! 
the vm on which this is all running has a dual core 2,8ghz cpu with 4gb of ram, which seems to fit the needs (according to documentation). 
  
  
we are really stuck here has we have no idea where the problem comes from... it can come from the era webconsole code as from the tomcat server but we really have no clue ! 
  
  
if anyone can help us out, any idea is welcome.
hi, 
  
we did try following: 
  
1. update java to the latest version 
this didn't affect the cpu or ram consumption. 
  
2. assign more ram for java, we found on other forums that high pcu consumption was caused by lack of memory. 
this didn't affect the cpu consumption neither 
  
3. change the port for connector from 8443 to to save resources for port redirection. 
the cpu consumption for the redirection is so low that it didn't change either 
  
4. try to disable autodeploy and do it manually 
we couldn't do this as the concerned era is allready in production 
  
5. do you have issues with http traffic as well or just with https? 
as we are working on security, there is just no http at all ! (disabled in tomcat) 
  
  
but we found out that regarding the place from which we did connect (and the available bandwith) it did impact the behavior. 
whith a good bandwith: the page loads in something as 10 to 15 seconds and cpu load doesn't go at 100% or just for the few last seconds 
whith a bad bandwith: the page takes 1 to 3 minutes to load and cpu consumption goes to 100% (over several cores) after the 10 first seconds (just like a memory leak but with cpu). 
  
we don't get why but the longer it takes for the client's side (browser) to load the app, how more cpu is consumes on server...
unfortunately, if using our [regular legacy update scripts there will be a reset at the end of the update](http://git.toradex.com/cgit/meta-toradex-demos.git/tree/recipes-images/images/files/library/imx6/flash_blk.scr?h=rocko#n43). so the issue will be that after the run update step it will always reset before doing the env default -a && saveenv. your proposed solution as given above will therefor update-loop (;-p). howeve… Magda, have you found what you need, yet?


I did this many years ago. It is simple… the 2nd time you do it!  

Exit points are simply “interrupts” that IBM supplies. You can attach programs to them, and the programs will automatically run at that point. For setting your AS/400 up to accept FTP logons, for example, the exit point is:  

QIBM\_QTMF\_SVR\_LOGON and the format you wil use is: TCPL0100.


A program inserted there can control WHO can log on, and when.  

To control WHAT they can do, you use another exit point, QIBM\_QTMF\_SERVER\_REQ and use format VLRQ0100.


My notes (from 1999) say I used the IBM TCP manual to get this info, specifically: TCP/IP manual SC41-5420-01 page I-14.


I do not know if it will allow me to post code here, it is long and complex due to the number of variables and some of them being in hex.


Write me (drow@waxie.com) if you would like me to email you my program code.


David Row  

WAXIE Sanitary Supply  

San Diego, CA





This is a link for [Add-ons for Firefox](https://addons.mozilla.org/en-US/firefox/). These are programs written by users or developers that the browser knows how and when to call. The developers of Firefox designed it to allow external programs to be hooked in by users of the browser.


IBM did something similar for a lot of the TCP/IP and other server functions. (And a lot of other things.) When you connect to the FTP server for example, the server checks to see if a program has been registered to process FTP logon requests. The registered program is an ‘exit program’.


Browser add-ons get an entry added to a file someplace within the browser directory structure. In your iSeries, the entry would be added to the Registration Facility. (Not always, but that’s the commonly recognized object for exit points and programs.) Use WRKREGINF to review your registration facility.


To create an exit program, you need to know the parameter list that will be passed to your program and the exit protocol. To find the parameter list, you should start looking at the documentation for the server the exit program will be associated with. The protocol, the meanings of the parms and what to with them, is also there.


A FTP exit program would be structured after documentation within the [File Transfer Protocol exit programs](http://publib.boulder.ibm.com/infocenter/iseries/v5r4/index.jsp?topic=/rzaiq/rzaiqreferenceexit.htm) topic of the Information Center for your release.


Once registered, a server logon exit program (for example) would be called just before the server decides whether or not to accept the logon. Your exit program directly influences that decision by returning an ‘accept or reject’ parameter. It chooses based on examination of the input parms.


The exit program may control who can and cannot logon, where they may logon from, what times of day logons are accepted, or it might accept all logons — its purpose can be simply to write all logons to a log file or to send a message when particular logons happen. Your exit program can do whatever it is programmed to do at that point in the logon process.


It doesn’t have to be a ‘security’ function. It’s whatever you want it to be.


For the FTP server, there are two general exit points. One is just before a logon is accepted. The other is just before each transaction in a session is processed. You can control individual transactions just as you can logons. (FTP client has its own exit points.)


Most other exit programs work on similar principles.


A few issues complicate things.


* An exit program needs enough authority to do whatever it needs to do; it can’t always rely on the authority of the session user.
* An exit program shouldn’t unduly delay transactions; there’s no way to know how often an exit program may be called, so you don’t want it slowing down every single transaction.
* Exit programs may be called by many instances of a server at the same time; it shouldn’t be locking things that are needed by a different instance.
* IBM changes the interfaces at times and the servers themselves can get PTFs; regular, on-going maintenance can be needed — keep the programs direct with little complication.
* There are other issues, but those are enough to consider.


Code a very simple exit program that accepts the parms and returns an ‘Accept’ indication. Don’t have it do anything except maybe send a message to a message queue. That lets you see how the registration facility works and how the parms work. It also gives you a program that you can register and deregister in the future to check whether or not the server is stilling calling your program correctly. (Problems can happen.)


Tom hello@philadamlucy yes there are 4 processes in all now so that is the new normal! from the beta group 6 months ago! hello, starting tomorrow we will update your consumer community beta systems to include a set of new files and processes. only systems at windows 7 or higher will receive the update. new files will be added in these locations: c:\programdata\wrcore\coreservice c:\programdata\wrcore\skyclient\db c:\program files\webroot\components c:\program files\webroot\core c:\windows\system32\drivers (wrcore.x64.sys) and two new processes will run: wrcoreservice.x64.exe wrskyclient.x64.exe there are no changes to the existing agent installationon your system. we are interested to learn of any performance or stability issues you encounter after this update. thanks, brad sorry but that’s only info that webroot will give us! thanks, hi,
thanks that does help tremendously! what you're dealing with is a "wait until ready" timeout condition. in other words test studio timed out waiting for the browser to say "i'm done downloading and rendering all the data for this website". there is a global setting for this which has a default value of just 30 seconds. it is the "client ready timeout" setting as shown in the [last figure on this page](http://www.telerik.com/automated-testing-tools/support/documentation/user-guide/test-execution/quick-execution.aspx) for quick execution. an equivalent setting exists in [the test list settings](http://www.telerik.com/automated-testing-tools/support/documentation/user-guide/test-execution/test-list-settings.aspx) when running your tests as part of a test list..  

  

if you don't want to set it globally (which can make sense to have the timeout much shorter for the remainder of your test) you'll have to resort to performing your navigate step in code... but it's pretty easy. try this:  

  


`int` `oldvalue = manager.settings.clientreadytimeout;`
`manager.settings.clientreadytimeout = 360000;`
`activebrowser.navigateto(``"my website here"``);`
`manager.settings.clientreadytimeout = oldvalue;`




kind regards,  

 cody   

the telerik team


do you want to have your say when we set our development plans?
do you want to know when a feature you care about is added or when a bug fixed?
explore the [telerik public issue tracking](http://www.telerik.com/support/pits.aspx)
system and vote to affect the priority of the items i seem to have fixed this by myself. i disabled probe on my .vcl and this seemed to fix the 503 issues. here is my .vcl for varnish incase anyone needs it(this might work for you)! :slight\_smile:

vcl 4.0;

backend default {

.host = "127.0.0.1";

.port = "81";

.connect\_timeout = 5s;

.… I had the same problem a couple of months back. Now if this is happening only with Chrome and not with other browsers, then the problem cannot be a virus. But it can be a virus if other browsers and programs are facing equal problems.  
  
So, with chrome as we all know there is a memory problem. So to solve that follow these simple steps.  
  
1. On the top right menu icon, select History  
2. From there select "clear browsing data"  
3. It will prompt for the time span, there you select "beginning of time"  
4. You might lose few data like saved passwords, favorites, but no data will be removed which are saved properly.  
  
After you are done with this, clean your system with Disk Cleaning Software. While doing this don't keep any browser window open especially Chrome.  
If you notice, it is skipping out the Chrome from the list, you have to select the program manually and click on "clear".  
  
After this restart your system and see if it works. If it doesn't then you have to undergo the entire process of uninstalling and re-installing Chrome. i just solved the problem myself. there was something wrong with my browser. after a restart everything is working as expected. sorry for the hassle. Google Chrome is the most popular browser for all that it integrates in terms of functions, security and performance and we know that as a general rule this type of browser is available for personal use computers. In the case of servers, the use of a browser is greatly limited because the essential task of the server is to deliver services and roles to the computers and objects of the domain so that if we use a browser we are accessing a potential risk that some virus or external threat violates the security of this and the information[.](https://technowikis.com). 




 (adsbygoogle = window.adsbygoogle || []).push({});
    

    

  For this reason Windows Server , until its 2019 edition, restricted the use of a browser and limited its options, especially downloads, but Windows Server 2022 renews this completely since its design is based on the Fluent Design scheme of Windows 10 and now The default browser is Edge, which is based on Chromium and offers the possibility of downloading and installing Chrome in a simple way. That is why getFastAnswer will explain to you how this procedure is in Windows Server 2022. 




 (adsbygoogle = window.adsbygoogle || []).push({});
    

     To stay up to date, remember to subscribe to our YouTube channel!    SUBSCRIBE   

    




 (adsbygoogle = window.adsbygoogle || []).push({});
    

     
   **1.**  How to install Chrome on Windows Server 2022 from Edge


    

  Step 1    
 We access Edge and look for Chrome. There we open the Google URL and we will see the following. We click on "Download Chrome" to start the download of Chrome.    

  ![image](https://getfastanswer.com/sites/getfastanswer.com/uploads/102/10289052832342468360.png) 

    

    

  Step 2    
 Once the file is downloaded, we execute it and it will proceed with the Chrome download. We see the download process:    

    

  ![image](https://getfastanswer.com/sites/getfastanswer.com/uploads/077/7713453413534771932.png) 

    

  Step 3    
 After it is downloaded, it will install on Windows Server 2022:    

  ![image](https://getfastanswer.com/sites/getfastanswer.com/uploads/110/11038682620275508198.png) 

    

  Step 4    
 After this Chrome will open automatically. As we see there, Google Chrome is available to be used in Windows Server 2022.    

 ![image](https://getfastanswer.com/sites/getfastanswer.com/uploads/048/4898310161873539779.png)    

    

     
   **2.**  How to install Chrome on Windows Server 2021 from Internet Explorer


   
 This is a traditional method of installing Chrome on Windows Server and we must remember that until Windows Server 2019 the default browser was Internet Explorer which by default assumes a series of security policies to avoid putting the integrity of the server and information at risk hosted there.    

  Step 1    
 To use this method we open Internet Explorer from Start:    

  ![image](https://getfastanswer.com/sites/getfastanswer.com/uploads/158/15849800946314077024.png) 

    

  Step 2    
 It is possible to see the security options of the browser:    

 ![image](https://getfastanswer.com/sites/getfastanswer.com/uploads/042/4223272834572723928.png)    

  Step 3    
 By default Explorer prevents downloads on the local server, in order to install Chrome we go to the configuration menu and select "Internet Options":    

    

 ![image](https://getfastanswer.com/sites/getfastanswer.com/uploads/170/17024309207081391792.jpg)    

  Step 4    
 In the displayed window we go to the "Security" tab:    

  ![image](https://getfastanswer.com/sites/getfastanswer.com/uploads/060/6023173931977916945.png) 

    

  Step 5    
 We click on "Custom Level", then we locate "Downloads" and activate the "Enable" box:    

  ![image](https://getfastanswer.com/sites/getfastanswer.com/uploads/111/11139576334510809414.png) 

    

  Step 6    
 Now we locate "Active Scripting" and check the "Enable" box. We apply the changes.    

  ![image](https://getfastanswer.com/sites/getfastanswer.com/uploads/121/12151840595813456817.png) 

    

  Step 7    
 Now we go to the Google URL and click on "Download Chrome":    

  ![image](https://getfastanswer.com/sites/getfastanswer.com/uploads/145/14540420436327349914.png) 

    

  Step 8    
 Then we click on "Accept and Install":    

  ![image](https://getfastanswer.com/sites/getfastanswer.com/uploads/104/10469348808569068465.png) 

    

  Step 9    
 We hope the download process is complete. Chrome will automatically download and install:    

 ![image](https://getfastanswer.com/sites/getfastanswer.com/uploads/081/8111773289156905051.png)    

  After this we will have access to Google Chrome. So we have seen two ways to install Chrome on Windows Server 2022[.](https://einwie.com). so after many late weekend nights of research and troubleshooting, i found the solution to the problem.  directaccess had taken over the ports that the health service and the client backup service ran on.  it was right in front of me but having the services run without issue confused me.  

tcp 6602 (used for status) tcp 8912 (used for backups)the elevated powershell command that fixed everything was:set-netnattransitionconfiguration –ipv4addressportpool @("x.x.x.x,6001-6601","x.x.x.x, 6603-8911","x.x.x.x,8913-47000")  replace x.x.x.x with the internal ip of your essentials server.  credit given to the admin and eric at   
https://713itsupport.com/blog/2015/10/windows-server-2012-r2-direct-access-grabs-port-6602-needed-by... Over the years, I've had several versions of DW -- some were more stable than others.  I can honestly say, the FTP has never been a big problem for me.   If it ever becomes glitchy, I close DW and clear my cache or restore preferences as that fixes most  problems. 

**[Unusual behavior in Dreamweaver? Try restoring preferences.](https://helpx.adobe.com/dreamweaver/kb/restore-preferences-dreamweaver.html "https://helpx.adobe.com/dreamweaver/kb/restore-preferences-dreamweaver.html")** 

I mainly work with dynamic sites but I don't have more than 2,000 files per site folder.    Each site folder resides on my primary hard drive within my local testing server's default web directory (htdocs or www).   

![CC-testingServer1.jpg](/legacyfs/online/1550323_CC-testingServer1.jpg)

I use Ctrl+Shift+U to upload an open document to server.  To be quite honest, it happens so fast, I don't even see the background process panel.    If I'm uploading many files, I expand my files panel so I can compare contents of local site with remote server to ensure that the last modified timestamps are consistent.

![CC-FilesPanel-expanded.jpg](/legacyfs/online/1550322_CC-FilesPanel-expanded.jpg)

Finally, I had to turn off Real-Time backups and anti-virus scanning while I work.  When those processes were running in the background, everything came to a crawl. 

Hope this helps.



 Nancy O'Shea, ACP  

Alt-Web Design & Publishing