Taming Tomcat, Day 3: Security and Perfomance
Programme for Today
Security on the host
File System Security
Tomcat's own security
Realms, users and roles
The SecurityManager
Recommendations
Exercise: Set up a Realm authenticated against a
[Break]
Security on the net
Exposed ports
Secure Sockets Layer
Exercise: Protect one of your Webapps with Secure Sockets
Lunch
Security against failures: Load balancing and failover
Clustering Tomcats
Load Balancing
[Break]
Performance Tuning
Tuning and Measurement
Performance of individual components
Generic fixes
Wrap