Administering Apache Tomcat

976 Ratings

Course Number: SRV-100

Duration: 2 days (13 hours)

Format: Live, hands-on

Apache Tomcat Training Overview

Apache Tomcat is the most popular platform for deploying Java-based™ Web applications. In this two-day course, attendees learn how to administer the Tomcat server, deploy applications to the server, ensure the server's security, troubleshoot problems, and cluster Tomcat to ensure high availability.

This course can be taught using Tomcat 10.0, 9.0, 8.5, 7.0, or any other version, with topics added or removed as appropriate to your version. This course can also be easily adapted to teach administration of TomEE Web Profile.

Location and Pricing

Accelebrate offers instructor-led enterprise training for groups of 3 or more online or at your site. Most Accelebrate classes can be flexibly scheduled for your group, including delivery in half-day segments across a week or set of weeks. To receive a customized proposal and price quote for private corporate training on-site or online, please contact us.

In addition, some courses are available as live, online classes for individuals. See a schedule of online courses.

Objectives

  • Set up and configure Apache Tomcat
  • Deploy Java web applications to the Tomcat server
  • Configure Tomcat valves for access logging, single sign-on, and access control
  • Monitor Tomcat via its JMX MBeans and a variety of tools, including JConsole, VisualVM, and PSI Probe
  • Tune Tomcat for optimal performance
  • Configure Tomcat logs and troubleshoot Tomcat
  • Secure Tomcat
  • Build and monitor database connection pools
  • Run Tomcat behind a web server, such as Apache httpd or Microsoft IIS
  • Build Tomcat clusters to ensure high availability

Prerequisites

All attendees should be familiar with general principles of Web server administration and have some experience building Web applications. Prior experience with Java as an application server administrator or developer is helpful but not required.

Outline

Expand All | Collapse All

Introduction
  • Overview of the Apache Software Foundation
  • Overview of Jakarta EE (formerly Java EE) as a platform
  • Overview of the features and functionality specifically provided by Tomcat
Installing Tomcat
  • Installing the Java Runtime Environment (JRE)
  • Performing the Tomcat installation (with nuances specific to your operating system discussed)
Examining the Tomcat installation directories
  • bin
  • conf
  • lib
  • logs
  • temp
  • webapps
  • work
Configuring Tomcat
  • server.xml (detailed walkthrough)
  • web.xml
  • context.xml
Tomcat Valves
  • AccessLog
  • RequestFilterValve
  • Selective coverage of other valves and/or filters as needed in your environment
  • Discussion of how filters are progressively replacing valves
Memory management and JMX monitoring
  • Understanding Java garbage collection
  • Using JAVA_OPTS, JMX and JConsole to monitor and tune Tomcat memory usage
  • Sizing Tomcat's JVM memory heap
  • Using JMX and JConsole to configure Tomcat via Tomcat's MBeans
  • Updating Tomcat's configuration via JMX "on the fly" without restarting Tomcat
  • Load testing with JMeter
  • Using VisualVM and PSI Probe
  • Controlling JMX MBeans via Ant
Logging
  • JULI logging
  • Configuring handlers and sources
  • Understanding exceptions and thread dumps
Connecting databases with Tomcat applications
  • Classic JDBC approach
  • Better approach: JNDI resources
  • Setting up and monitoring database connection pools
Security
  • File system security
  • Java security manager
  • Realms, authentication, and authorization (if appropriate in your environment)
  • SSL (optional)
  • Closing potential security holes in Tomcat’s default configuration
    • Turning off the shutdown port
    • Ensuring directory listings are disabled
    • Removing unnecessary applications
    • Password protecting the JMX port (if open)
    • Turning off unnecessary connectors
    • Hardening the remaining connectors
Performance tuning strategies
  • Additional JVM tuning tips
  • Changing to a different garbage collector
  • Choosing the right connector (NIO or APR)
  • Disabling/removing unneeded applications
  • Tuning incoming connections and back-end database connection pools
  • Turning off Jasper development mode
  • Precompiling JSPs
  • Preloading servlets
  • Turning off autodeploy and automatic watching of web.xml files
Tomcat 8.85/9 New Features [optional; a section on Tomcat 10 new features could be substituted instead]
  • Memory leak prevention and detection
  • Support for new versions of the Servlet, JSP, and EL specs(and the practical implications of this for Tomcat admins)
  • Cross-site request forgery prevention (and how to configure)
  • Session fixation attack prevention
  • Alias support (which allow static content to be stored outside the WAR file)
  • Reference links for your developers
Running Tomcat behind Apache httpd or IIS [this section would be taught using your web server and connector module of choice]
  • Why run Tomcat behind Apache httpd or IIS?
  • Installing mod_jk (Apache httpd or IS), mod_proxy_ajp and mod_proxy_balancer (Apache httpd), or URL Rewrite and ARR (IIS only)
  • Proxying traffic to Tomcat via AJP or HTTP
  • Monitoring the status of your web server's connection to Tomcat
Tomcat Clustering
  • Configuring mod_jk (in Apache httpd or IIS), mod_proxy_balancer (Apache httpd), or ARR (IIS) as a load balancer
  • Hardware load balancing as an alternative to software load balancing
  • Sticky sessions
  • Session Replication using <Cluster />
  • Configuring the application to be distributable
  • Setting up and testing failover
  • Alternative session replication back-ends
Conclusion

Training Materials:

All attendees receive Accelebrate's comprehensive courseware and a two-page checklist of performance tuning and security suggestions.

Software Requirements:

  • At least 8GB RAM and 10GB hard drive space.
  • The course can be taught using any modern operating system, including Windows, Linux, macOS, and Solaris. Upon request, a VMware VM can be provided with a self-contained Linux environment for the training.


Learn faster

Our live, instructor-led lectures are far more effective than pre-recorded classes

Satisfaction guarantee

If your team is not 100% satisfied with your training, we do what's necessary to make it right

Learn online from anywhere

Whether you are at home or in the office, we make learning interactive and engaging

Multiple Payment Options

We accept check, ACH/EFT, major credit cards, and most purchase orders



Recent Training Locations

Alabama

Birmingham

Huntsville

Montgomery

Alaska

Anchorage

Arizona

Phoenix

Tucson

Arkansas

Fayetteville

Little Rock

California

Los Angeles

Oakland

Orange County

Sacramento

San Diego

San Francisco

San Jose

Colorado

Boulder

Colorado Springs

Denver

Connecticut

Hartford

DC

Washington

Florida

Fort Lauderdale

Jacksonville

Miami

Orlando

Tampa

Georgia

Atlanta

Augusta

Savannah

Hawaii

Honolulu

Idaho

Boise

Illinois

Chicago

Indiana

Indianapolis

Iowa

Cedar Rapids

Des Moines

Kansas

Wichita

Kentucky

Lexington

Louisville

Louisiana

New Orleans

Maine

Portland

Maryland

Annapolis

Baltimore

Frederick

Hagerstown

Massachusetts

Boston

Cambridge

Springfield

Michigan

Ann Arbor

Detroit

Grand Rapids

Minnesota

Minneapolis

Saint Paul

Mississippi

Jackson

Missouri

Kansas City

St. Louis

Nebraska

Lincoln

Omaha

Nevada

Las Vegas

Reno

New Jersey

Princeton

New Mexico

Albuquerque

New York

Albany

Buffalo

New York City

White Plains

North Carolina

Charlotte

Durham

Raleigh

Ohio

Akron

Canton

Cincinnati

Cleveland

Columbus

Dayton

Oklahoma

Oklahoma City

Tulsa

Oregon

Portland

Pennsylvania

Philadelphia

Pittsburgh

Rhode Island

Providence

South Carolina

Charleston

Columbia

Greenville

Tennessee

Knoxville

Memphis

Nashville

Texas

Austin

Dallas

El Paso

Houston

San Antonio

Utah

Salt Lake City

Virginia

Alexandria

Arlington

Norfolk

Richmond

Washington

Seattle

Tacoma

West Virginia

Charleston

Wisconsin

Madison

Milwaukee

Alberta

Calgary

Edmonton

British Columbia

Vancouver

Manitoba

Winnipeg

Nova Scotia

Halifax

Ontario

Ottawa

Toronto

Quebec

Montreal

Puerto Rico

San Juan