WebSphere Application Server & Liberty

WebSphere Application Server & Liberty

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

Thanks for attending WAS Administration: Channel Framework Problem Determination! Any further questions?

  • 1.  Thanks for attending WAS Administration: Channel Framework Problem Determination! Any further questions?

    Posted Tue June 04, 2019 11:31 AM
    Thanks for attending today's webcast! We received some great questions throughout the presentation, if you have any follow-up questions, please post them on this discussion. My team and I will do our best to help you.

    ------------------------------
    Ashish Ghodasara
    ------------------------------


  • 2.  RE: Thanks for attending WAS Administration: Channel Framework Problem Determination! Any further questions?

    Posted Tue June 04, 2019 01:33 PM
    Edited by Alex Pennie Tue June 04, 2019 04:29 PM
    If we have to change the default ports like default listening ports of WAS, can it be done thru UI or do we need to change in any .xml file?

    *Posted on behalf of Muhammad Rasheed*


  • 3.  RE: Thanks for attending WAS Administration: Channel Framework Problem Determination! Any further questions?

    Posted Tue June 04, 2019 02:54 PM
    Hi Muhammad,

    Yes you can do that via UI. It's two step process..
    (1) Change webcontainer listening port by going to Application Server > server_name > Ports > WS_Defaulthost and change port number there. Apply and save changes
    (2) Change in virtual host setting by going to Environment > Virtual host > default host > host aliases click on your old port entry name and change it to new

    Let us know if you have any followup questions

    ------------------------------
    Ashish Ghodasara
    ------------------------------



  • 4.  RE: Thanks for attending WAS Administration: Channel Framework Problem Determination! Any further questions?

    Posted Tue June 04, 2019 03:03 PM
    ​Hi Ashish
    I attended the webcast. I have a question regarding maximum open connections in TCP Inbound channel. The default max is 20000 connections. Webcontainer thread pool max is 100. So 100 webcontainer threads can share a maximum of 20000 client connections. But this will happen only if 'Asynchronous Request Dispatching' is enabled. If it is disabled then max client connections allowed will be equal to the maximum limit in  webcontainer threads. Is my assumption, correct?
    thanks
    James

    ------------------------------
    James
    ------------------------------



  • 5.  RE: Thanks for attending WAS Administration: Channel Framework Problem Determination! Any further questions?

    Posted Wed June 05, 2019 07:35 AM
    Edited by Tom Alcott Wed June 05, 2019 07:36 AM
    James,

    The Asynchronous request dispatcher (ARD)  settings
    https://www.ibm.com/support/knowledgecenter/SSAW57_9.0.0/com.ibm.websphere.nd.multiplatform.doc/ae/cweb_ard.html 
    do *not*  impact the maximum number of connections behavior for the web container

    There's a discussion of the web container HTTP  transport implementation and settings in the WebSphere Performance Tuning Cookbook https://publib.boulder.ibm.com/httpserv/cookbook/
    specifically
    https://publib.boulder.ibm.com/httpserv/cookbook/WebSphere_Application_Server-WAS_Traditional-HTTP.html

    I'll add that the 20,000 maximum connections setting is likely too large for effective failover in my experience, this because the web container continues accepting connections, up to the 20K maximum, when there's a slowdown, or failure of a downstream component and so the backlog of requests in this case can exceed component capacity very quickly (note also that by default the web container handles 100 requests/connection before closing and opening a new connection) .....in most cases a few hundred maximum connections provides adequate capacity, concurrency request buffering, failure detection and failover.


    ------------------------------
    Tom Alcott
    IBM Senior Technical Staff Member

    ------------------------------



  • 6.  RE: Thanks for attending WAS Administration: Channel Framework Problem Determination! Any further questions?

    Posted Wed June 05, 2019 09:12 AM
    I sent you direct email on this yesterday but just to keep everyone aware
    -----
    Hi James,

    Thank you for your followup email. I was referring to com.ibm.ws.webcontainer.channelwritetype webcontainer property mentioned on this KC page: https://www.ibm.com/support/knowledgecenter/en/SSAW57_8.5.5/com.ibm.websphere.nd.multiplatform.doc/ae/rweb_custom_props.html

    By default this property is set to "async". When you set this to "sync" ... here the statement in KC that alines with what you are saying .. "The maximum number of requests that can be processed simultaneously by the web container is limited by the number of web container threads. Additional requests are queued, waiting for a request that is in process to complete"


    Async request dispatcher (ARD) is totally different. With that turned on, if your application include another page e.g. jsp include, second webcontainer thread will process that page in parallel. Here is more details on this: https://www.ibm.com/support/knowledgecenter/SS7JFU_8.5.5/com.ibm.websphere.express.doc/ae/uweb_ard.html

    Please let me know if you have more questions.

    Ashish
    -----------

    ------------------------------
    Ashish Ghodasara
    ------------------------------



  • 7.  RE: Thanks for attending WAS Administration: Channel Framework Problem Determination! Any further questions?

    Posted Tue June 04, 2019 03:03 PM
    We have changed the to tls v2 using UI but we found that while checking it from command promt, it still shows old tls settings even after restart, do it need to be change on server.xml as well or the UI is synced with the backend file?

    *Posted on behalf of Muhammad Rasheed*


  • 8.  RE: Thanks for attending WAS Administration: Channel Framework Problem Determination! Any further questions?

    Posted Wed June 05, 2019 08:51 AM
    Hello Muhammad,
    are you using WAS Standalone or WAS ND in a federated cell?
    If you use WAS Standalone the changes are written to the server.xml immediately when you save the changes.
    If you use WAS ND you are doing the changes thru the deployment manager (dmgr). In that case the changes are written to the dmgr configuration only and then synchronized to the nodes asynchronously - that are at least the default settings. This means that if you save on the dmgr and restart the server immediately you *might* miss the change on the node as the change was not yet synchronized from the dmgr to the node. Therefore you should check and ensure that the nodes are synchronized before restarting (in the WAS Admin Console go to: System administration --> Nodes).
    Alternatively you can make sure that changes are synchronized immediately either by clicking Review instead of Save

    and then make sure that that the checkbox the Synchronize changes with Nodes is checked before pressing Save.

    You can also change the default settings to always sync changes immediately y changing your console preferences:


    Btw - what I'd like to know .. how did you check from the command line if TLSv2 is used?

    Hope that helps - Hermann

    ------------------------------
    Hermann Huebler
    #IBMChampion
    ------------------------------



  • 9.  RE: Thanks for attending WAS Administration: Channel Framework Problem Determination! Any further questions?

    Posted Wed June 05, 2019 04:37 PM
    To override the TLS - you will have to setup -D java command line argument as mentioned to match ORACLE behavior - 

    SSLCONTEXT.GETINSTANCE BEHAVIOR LIKE ORACLE


    https://www-01.ibm.com/support/docview.wss?uid=swg1IV85279

    https://www.ibm.com/support/knowledgecenter/en/SSYKE2_8.0.0/com.ibm.java.security.component.80.doc/security-component/jsse2Docs/matchsslcontext_tls.html

     

    https://www.ibm.com/support/knowledgecenter/en/SSYKE2_8.0.0/com.ibm.java.security.component.80.doc/security-component/jsse2Docs/overrideSSLprotocol.html



    ------------------------------
    Ajit Jariwala
    ------------------------------