Yearly Archives: 2018

Caucho Newsletter September 2018

Fall is approaching quickly and as the season changes, so does the state of Resin! Let's take a look…

Newsletter at a glance

Korea case study – nationwide scalability in 3 days!
Bug fixes
Release schedule
JDK updates
Embedded Resin
Question for our users
Cookbooks available
Download verification

Case Study: Resin clustering = Nationwide Scalability

“We solved our nationwide scalability and performance problems using Resin clustering. Additionally, we have achieved major performance benefits to our high traffic sites. We’ve experienced enough that migrating to Resin Pro was a very well judged choice in performance increase and cost savings aspects. We see Resin as long-term solution.”

-Jung Sir. IT Team, Korea Chamber of Commerce and Industry

Case study pic

Case study pic 2

With service traffic averaging 30,000 daily visitors and 70 transactions per second, the Korea Chamber of Commerce apps must always be available for end users. As their audience grew, the need for geographically redundant clustering became vital. Resin Pro’s triad clustering kept network traffic to a minimum, while providing an alternative Hessian binary format for clustering any object. This allowed legacy applications to benefit from cloud clustering through configuration instead of code reworking.

Bottom line – KCCI migrated away from a popular web application server to Resin Pro and improved availability for their growing number of visitors. They went from test to deployment in just three days and the cost savings mean this will be a long term solution.

Bug Fixes:

Resin – 4.0.59 – in progress

==============

- 0006180: Double quotes not set through web server

- 0006181: SSL protocol update in Quercus

- 0006177: Deadlock starting ResinEmbed
- 0006184: Path-based XSS in redirects from FileServlet

Resin – 4.0.58 – currently available

==============

- 0006170: ByteCodeClassScanner fails for packages with JDK9 module-info.class files

- 0006168: AsyncServlet Wake-up occasionally looses events

- 0006171: <load-on-startup> retry logic customization

- 0006169: Enable/Disable Openssl protocols from resin.properties

- 0006166: All threads associated with a port disappear

- 0006172: request parameters not kept immutable – 0006167: cookie-same-site

Release Schedule

Resin 4 releases are scheduled every 5-7 weeks. With releases including performance enhancements, bug fixes, feature requests, and security patches it is advisable to be running the most current version of Resin in production.

For details or questions about specific fixes & vulnerabilities that have been patches in releases, email wiley@caucho.com

JDK Updates

Java development has a new release cadaence with releases coming every 6 months. The new release schedule calls for a feature release every six months, update releases every quarter, and a long-term support (LTS) release every three years.

The current release schedule is as follows:

Resin 4.0.57+ currently supports JDK 9 and can be downloaded on the Caucho website. Future releases of the JDK will be fully supported by Resin weeks after initial Java releases are made public.

If you need to start development with a new version of Java before our official Resin release, feel free to ask us about an early snapshot!

Embedded Resin

An embeddable version of the Resin server can be useful in instances where a user would like to package both the app & app server together, reducing potential complexities for deployment. With deployment orchestration and container platforms like Kubernetes & Docker gaining usage, embedding Resin can aid in creating deployable runtime environments.

Q: Are there any performance implications running Resin in this fashion?

Nope! The *Embed objects are only used to configure the regular Resin server. Once the server is configured they become discarded or unused.

The main Resin embed class is com.caucho.resin.ResinEmbed. Additionally, the http://javadoc4.caucho.com/ website provides documentation on embedding Resin.

The main Resin class: com.caucho.server.resin.Resin, can be bootstrapped for additional capabilities.
For a simple application, com.caucho.resin.ResinEmbed, HttpEmbed (for port) and WebAppEmbed are the classes you need first. An example is provided below:

Resin embed 2

How are you using Resin?

Comic Con 2018 We'd like to hear from you!!

Our quarterly newsletter reaches 8700 readers.

    If you have an application that deserves the
    spotlight, email Alexandra at garmon@caucho.com
    to share your story. We can create a case study
    or even a fun paragraph with a link to show off your work.

(Caucho CEO, Steve Montal @ Comic Con 2018)

Resin Cookbooks

Simple 10-minute overviews of various Resin topics are available on the Caucho website. For new users or even users who want brief refreshers on advanced Resin topics, the cookbooks are a great place to start.

Resin Deployment

–basic application deployment on Resin

Resin Debugging

–useful debugging tools for Resin deployments

Resin on Amazon EC2

–get setup on Amazon EC2 in minutes

Resin Security

– 4 ways to secure your deployment

Resin Checksum

For verifying your Resin download, the following url format and location can be used to view the sha256 checksum:

Example:

https://caucho.com/download/resin-pro-4.0.55.tar.gz.sha256

Download the latest version of Resin today!

Caucho Newsletter June 2018

Resin’s stability continues to reach new heights with increased deployments! As of this newsletter, bugs.caucho.com reports only 1 open bug and 2 feature requests.

We are focusing this newsletter on migrating from Resin 3 to Resin 4. Both versions are included with your Resin Professional license. If you are already using Resin 4, feel free to scroll down to the release notes. Imperial Palace Roppongi.5

Newsletter at a glance

Benefits of migrating from Resin 3 to Resin 4
Sizzling summer special offer for all Resin users
Release notes
Caucho and NTT Data Intramart partnership meeting in Tokyo*
Resin Tip – /resin-admin usage

Resin 4.0 – A summer of migration

Migrating to Resin 4.0 provides the advantage of the most secure, stable and feature packed version of Resin available. It features an underlying architecture that results in competitive business advantages.

Resin 4.0 is dynamic by nature, so portions of a cluster or application can be upgraded or patched without interruption to end users. This means the application grows and scales as demanded by end users. As microservices and continuously deployed apps continue to dominate the landscape, Resin 4.0 provides developers with extended command line and admin capabilities for deploying, monitoring, and upgrading with ease and precision.

If you’re running a cluster in an earlier version of Resin, check out the performance enhancements you'll see in an upgrade:

Integrated Health System for high availability including

Cluster information ( open/closed/active connections), session count, thread/memory/CPU graphs, automated health checks to gracefully shutdown and recover through failures
HTTP-related debugging, Database pooling, Cache related debugging, JSP debugging, & more

Improved cloud computing support

A rewrite of Resin’s internal clustering focusing on a high performing hub & spoke model
Revamped cluster hearbeat service for hybrid, private and public clouds
Dynamic clusters that can elastically scale clusters to respond to increased load

Dynamic configuration

Externalized configuration files for simple cluster management
High availability configured by default to get you up and running in Amazon EC2, Azure cloud, or your own private cloud in minutes.

IS IT EASY?

Yes!

Recently, we worked with users on Resin 3 to 4 upgrades and a 4.0.10 to 4.0.56 upgrade. While there were some initial questions surrounding Resin 4.0 new configuration and CDI capabilities, total migration time took only 3 weeks and needed only email correspondence.

IS IT FREE?

Yes!

If you’re already licensing Resin, the upgrade is free! All you have to do is download the latest version at http://caucho.com/products/resin/download. You’ll have access to a version of Resin that has benefited from thousands of deployments, decades of feedback and a fast release cycle. And with only one open bug, you will be migrating to a proven solution with thousands of deployments.

Summer special upgrade offer!

As a thank you to Resin users, if you’re using Resin 3.0, 3.1 or an early version of 4.0, then it’s time to upgrade. Be the company hero by pro-actively upgrading your entire system with the performance and enhanced features of the latest version of Resin.

Caucho engineering is offering complimentary engineering migration support to Resin 4.0.56. Our goal is for you to experience a seamless and successful upgrade to Resin 4.0.56+ and operate with unsurpassed stability.

For more information, contact Alexandra Garmon at garmon@caucho.com.

Release notes:

With Resin 4.0.57 ironing out the last of our Java 9 related bugs, the next version of Resin will focus on Java 10 additions.

Resin – 4.0.56

==============

- 0006066: Session persistence and deserialization

- 0006130: DB timing Java.lang.IllegalStateException: corrupted indirect block id

- 0006149: a fault occurred in a recent unsafe memory access operation in compiled Java code

- 0006151: com.caucho.server.hmux.HmuxRequest broken

- 0006150: @Named("red.lion") vs @Named("red.tiger")

- 0006124: SSL SNI Support for Resin 4

- 0005574: SSL with multiple domains

- 0006113: Access-logging of TLS protocol version and used Cipher-Suite

- 0006127: servlet-mapping only the first url-pattern works

- 0006122: Doc update for Custom Access Log

- 0006112: minGzipSize property

- 0006082: JDBC 4.2 additions

- 0006123: NPE in access log

- 0006114: PDF report name timestamp does not match generated time

In Progress: Resin 4.0.57

Resin – 4.0.57

==============

- 0006128: /resin-admin access from dynamic servers in a cluster

- 0006159: Takes huge amount of time to start in a situation of having more than 20 web applications

- 0006152: java.lang.IllegalArgumentException: 'X' is an invalid server because it has the same IP:port as 'X'

- 0006116: DependencyCheckWorker serves non-modified .jsp before serving new compiled .jsp

- 0006157: java.lang.ClassCastException: ScalingPod

- 0006121: Logging initialization issue on JDK 9 with scripting.

- 0006156: quercus-env-timeout &quercus-timer threads not terminating completely

- 0006154: ./configure fails on fedora 27

Caucho in Tokyo – meeting with Intramart, our Japanese partner and #1 BPM workflow software

Our CEO Steve Montal traveled to Tokyo in May to meet with our partners NTT Data Intramart, http://www.intra-mart.com, who we have been working with for almost 20 years. NTT_June 2018 4

Intramart has been the #1 BPM workflow software in Japan for over 10 year and over 6,000 Intramart customers are deployed on Resin. Intramart’s “Open & Easy” concept provides flexibility, scalability and development productivity to thousands of users, including some of the largest companies in the world.

Steve Montal observed, “NTT Data Intramart has built and impressive and technology-leading software platform and BPM solution. Our successful partnership continues to grow as Intramart expands globally.”

Resin Tip – /resin-admin

Recently we’ve held a number of conference calls discussing health monitoring in Resin. As an integral part to Resin 4.0, the /resin-admin app can be used to monitor your Resin environment. With such low overhead, it’s recommended to be ran in every production site.

/resin-admin reports internally gathered statistics about your Resin deployment, including:

Open connections, TCP Ports, load balancer, cluster, database pool information
Memory pools, garbage collection, memory usage
Thread counts: active, idle, runnable, native, waiting, blocked
Health checks, graphs and logs
Session count, size, timed out
CPU Profiling
JDK, OS, license information, & more!

However, Resin goes beyond typical metrics monitoring by looking for anomalies in JMX attributes. Any numeric attribute of any MBean in JMX can be configured as Meter in Resin, which then enables:

Persistent historical tracking
Visual graphing in resin-admin
Visual graphing in PDF reports
Cluster wide reporting
Anomaly analysis and logging
Triggering health actions (heap dump, thread dump, restart, etc)

By default access is restricted to internal networks but /resin-admin can be configured for usage over a secure connection. For questions or feature enhancements email wiley@caucho.com.

Download the latest version of Resin today!

Caucho Newsletter February 2018

Happy 20th Birthday Caucho!

IMG_0450_straight

Our Newsletter at a Glance

A note from our Co-Founder – Celebrating 20 Years!
Caucho at Olympic Torch Relay in Seoul (pic on right)
2018 Road Map
Bug Fixes
Java Development
Spectre & Meltdown Benchmarks
Quick Tip – /resin-admin usage

Dear Resin, Quercus, Hessian and Baratine users,

It's hard to believe that the company Scott and I started 20 years ago has grown into millions of users. In 1998 we decided to focus on lightweight and open source Java. Since then, Gartner has named us a "Visionary" and Netcraft has reported over 4 million deployments worldwide.

I'd like to say a very special thank you to our developers and partners around the globe. It's great to check my mail and talk to engineers who have been running Resin for almost two decades! It feels like we were kids when the Internet took off and now my kids are programming Java and finding issues to fix!

Keep sending us your bugs and make sure to stop by our offices next time you're in San Diego. Here's to another great 20 years!

– Steve Montal, Co-Founder and CEO

2018 Road Map

This year we will showcase the Caucho Platform using new case studies, examples and cookbooks.

In 2018, Resin development includes:

TLS Server Name Indication: As TLS does not provide a mechanism for a client to tell a server the name of the server it is contacting. It may be desirable for clientsto provide this information to facilitate secure connections to servers that host multiple 'virtual' servers at a single underlying network address.
Spring Boot Jar Loader: The spring-boot-loader modules allows Spring Boot to support executable jar and war files.Java does not provide any standard way to load nested jar files (i.e. jar files that are themselves contained within a jar). This can be problematic if you are looking to distribute a self-contained application that you can just run from the command line without unpacking. Resin’s integration with the Spring Boot Jar Loader will allow users to deploy self-contained web apps in a nested .jar or .war format
JDK Updates: Continued QA testing surrounding the releases of Java
MVN repository: We are inching closer to releasing a version with zero reported bugs! Upon reaching this coveted version release, we will be uploading it to the MVN repository for simple integration and download
Bug fixes, feature requests and performance

Bug Fixes

We are in bug-fixing mode for the upcoming 4.0.56 release in 3-4 weeks. More fixes are planned for the final release, but as of today, the following have been closed:

Resin 4.0.56

==============

- 0006127: servlet-mapping only the first url-pattern works

- 0006122: Doc update for Custom Access Log

- 0006112: minGzipSize property

- 0006082: JDBC 4.2 additions

- 0006123: NPE in access log

- 0006114: PDF report name timestamp does not match generated time

We continue to move forward with the stability and performance of the Resin platform. Recently we have seen an uptick in the amount of on site clustered deployments. While no notable bugs related to clustering have been reported, we continue to refine the /resin-admin for management and oversight of clusters. If there is a feature you would like to see implemented in the /resin-admin or Resin in general, submit a feature request at the following link:

http://bugs.caucho.com/bug_report_page.php

Simply register an account (if you haven’t already), set the severity to “feature”, and provide a short description.

Java Development Speeds Up

Oracle will speed up the releases of standard Java, with a new release JDK coming every six months and a long-term support version updated every three years. The next version of Java will be released in March 2018.

The renewed focus on the Java release cycle should bring about an abundance of feature implementations. Caucho plans to support all future releases of Java for Resin. As releases are made available, we will be reviewing the necessary architectural changes and providing updates as we work through implementation details.

Spectre & Meltdown Benchmarks

We are working to determine the performance impact (if any) that the patch fixes to Spectre & Meltdown will bring to Resin. Until we have worked through our extensive QA suite on a patched version, this project will be ongoing and we will share the results in future newsletters and caucho.com

Caucho at Olympic Torch Relay in Seoul

In January, we headed to Seoul to meet with Xest Information Technology, our partners and resellers in Korea for over fifteen years. Xest’s sales continue to increase as Resin has become a popular

solution for government, education and corporations in Korea with hundreds of new deployments annually.

As a special bonus, we got to see the Olympic Torch relay in the Dongdaemun area of Seoul. It was freezing cold, but spirits were high in anticipation of the Pyongyang Games!

Many thanks to Xest for their hard work and dedication to making the Caucho Platform a significant and widespread web applicaton server in Korea.

Quick Tip – /resin-admin statistics

Many of our clients are familiar with the /resin-admin interface, but unaware of some of the useful statistics and monitoring capabilities included. From the web-apps tab in /resin-admin the following statistics are available for your webapp:

Activity

Active Requests

Active Sessions

Configuration:

AlwaysSaveSession

CookieAppendServerIndex

CookieDomain

CookieHttpOnly

CookieLength

CookieMaxAge

CookieName

CookiePort

CookieSecure

CookieVersion

EnableCookies

EnableURLRewriting

EstimatedMemorySize

IgnoreSerializationErrors

InvalidateAfterListener

Name

ObjectName

PersistentStore

ReuseSessionId

SaveMode

SessionActiveCount

SessionCreateCountTotal

SessionInvalidateCountTotal

SessionMax

SessionTimeout

SessionTimeoutCountTotal

Type

WebApp

WebApp Specific:

ClassPath

ClientDisconnectCountTotal

Configs

ContextPath Enabled

ErrorMessage

Host

ManifestAttributes

Name

ObjectName

RedeployCheckInterval

RedeployMode

RepositoryMetaData

RequestCount

RequestCountTotal

RequestReadBytesTotal

RequestTimeTotal

RequestWriteBytesTotal

RootDirectory

SessionManager

StartTime

StartupMode

State

Status500CountTotal

Status500LastTime

Type

Version

For examples on interacting with Resin MBeans or other JMX statistics, take a look at the source code of the /resin-admin application. It is after all, a web-app running on Resin!

Upgrade to the latest version of Resin today!