1

Sun Web Server 7: A Jewel in Sun GlassFish Portfolio

1

Murthy Chintalapati (cvr)Senior Engineering Manager,Web Infrastructure ProductsFebruary 10, 2009.

Sun Confidential: Internal Only 2

Contents• Sun GlassFish Portfolio

> A robust portfolio of web servers

• Sun Web Server 7> Technology Overview> Performance & Scalability> Open Source

> Sample Production Deployments

Sun Confidential: Internal Only 3

• Apache HTTPd> Most dominant, versatile open source web server.> Foundation of LAMP architecture> Interoperates well with Tomcat/GlassFish app servers

• Sun Web Server 7> Most scalable web server, optimized for modern multi-core

CMT (Chip-based Multi-threaded) systems.> Features support for heterogeneous technologies (Java JSP/

native PHP) and eases cluster management.> Deployed by Sun and Sun's enterprise customer base for

reliability, security and manageability.

• Lighttpd, light-weight open source web server.

Robust portfolio of web servers

Sun Confidential: Internal Only 4

Sun Java System Web Server 7.0 (formerly Sun ONE Web Server, originally Netscape Enterprise Server)

• Supporting:> HTTP/1.0, HTTP/1.1> JSP/Servlet> CGI> FastCGI> SHTML> HTML> LDAP, Access Control> SSL/ECC

• Improve Web security and performance

• Reduce Cost & Complexity

• Reduce administration complexity> Built-in cluster management> Scriptable command line

administration tools

• Platform Support:> Solaris 8, 9, 10 (UltraSPARC 32-bit, 64-bit)> Solaris 9, 10 (x86); Solaris 10 (x64/AMD64)> OpenSolaris 2008.11 (x86/AMD64)> Windows 2000, XP SP2, 2003 Server, EE> RedHat EL 3.0 (32-bit only), 4.0 U4 or later,

5.0, SUSE EL 9, 10 SP2 (32-bit, 64-bit) > HP-UX 11iv1> AIX 5.2, 5.3

FREE under Solaris Enterprise Licensing

Sun Confidential: Internal Only 5

Web Server Overview• Scalable

> Multi-threaded application> In-process Java container> 64-bit capable; SPECweb2005

record setting architecture.

• Secure> Access Control built in> LDAP, local user database, etc> SSL capable out of box

> Elliptic Curve Cryptography

> DoS Attack awareness

> Cross-site script detection

> Web Services Security

> WebDAV ACL

• Data center friendly> Built-in (and scriptable) cluster

management> Configurations are standard text

files; can be stored in CVS, BitKeeper, etc

> Several stats reports available for health checks; SNMP support for integration into standard monitoring tools

> Request mapping for self-protection from DoS attacks

> Integrated Reverse Proxy; URL rewriting with regex matching.

• Extensible

> Variety of APIs available to extend server capabilities; NSAPI, Java EE 5 Servlet/JSP, FastCGI, etc.

Sun Confidential: Internal Only 6

Administration● Cluster Management

> Support for centralized management of configuration data and replication to nodes

● Redesigned GUI> Improved navigation.> Easy access to SSL setup, virtual servers, JVM

settings, web app deployment and other commonly performed administrator tasks.

● New CLI – comprehensive, secure and scriptable> Feature parity with GUI.> Scriptable with embedded TCL engine.

Sun Confidential: Internal Only 7

Sun Fire T5220 (Niagara 2)• 8core, 64-thread system on chip CPU• On-chip crypto processor with 8x FPUs• 10GbE networking

Sun Web Server 7The Most Eco-friendly web server

SPECweb2005 benchmark - Simultaneous User SessionsSystem Metric Bank Support E-comm Way/Ghz #core HP DL585 G2 22254 38400 20704 30720 4/3 Opteron 8SunFire T5220 41847 70000 40000 58000 1/1.4 Sun T1 8HP DL580 G5 43854 76032 39456 62304 4/2.31 Xeon 16

+Sun Web Server 7.0u3• 64bit Solaris 10 Update 5 platform• Optimized to leverage CMT multi-core multi-

threaded architecture• In-kernel SSL performance• Heterogeneous scripting (JSP,PHP)

Sun Confidential: Internal Only 8

Open Web Server• Sun Web Server is now open sourced

> Includes HTTP server core components> Source coded hosted on OpenSolaris web stack

project and can be built on most Unix platforms.> Released under BSD License> For more details, visit:

http://wikis.sun.com/display/wsFOSS/Open+Web+Serverand the announcement: http://blogs.sun.com/jyrivirkki/entry/announcing_open_source_web_server

Sun Confidential: Internal Only 9

• One of the Internet’s largest dynamic JSP content providers with hundreds of thousands of JSP files active on any given day. 15 live games daily; One billion minutes of streaming media over 2,430 full length games to over one billion visitors w/ record breaking 90million views a day!.

MLB.com: A Sun Web Server Reference Deployment

Sun Confidential: Internal Only 10

Sun Blogs (blogs.sun.com – A Sun Web Server site profile• Premier blogging infrastructure for Sun employees

• Hosted on SunFire T2000 servers, Web Server 7.0 and MySQL

http://www.sun.com/bigadmin/features/articles/sunblogs.jsp?feed=RSS

Sun Confidential: Internal Only 11

Summary• Sun GlassFish Portfolio

> A robust portfolio of web servers

• Sun Web Server 7> High performance web server that scales well on modern

multi-core x64/CMT servers.> Features data center friendly cluster management,

reverse proxy, URL rewriting and DoS attack protection.> Supports heterogeneous dynamic server extensions

including NSAPI, Java EE Servlets/JSPs, PHP, FastCGI

> Server core open sourced under BSD license> Deployed widely by Sun and Sun's enterprise customers.

12

Thank You!

http://sun.com/webserver

12

Sun Confidential: Internal Only 13

Sun GlassFish Web Stack

Sun Web ServerApache HTTPd GlassFishLighttpdMemcachedMod_jk,perl, rubyPHP, Ruby, PythonSquid , Tomcat

Sun Confidential: Internal Only 14

Dynamic Reconfiguration

• Make changes on-the-fly to the server> CLI and GUI support to trigger reconfigurations

• Server knows which changes require a server restart• NSAPI support for plugins to implement dynamic

reconfiguration• Server falls back to last “good” configuration if a change

results in a configuration error• Server “configurations” are in-memory representations of

the information in the configuration files

Sun Confidential: Internal Only 15

Command-Line Interface

• Is an embedded Java Command Language (JACL) shell• Can be run in single, shell, or file modes• Provides auto completion of commands• Provides all functionality present in the GUI:

> Configuring server settings and subsystems> Managing certificates> Starting and stopping servers> Monitoring the server, and so on

• Command-line scripts can be run against remote servers

Sun Confidential: Internal Only 16

Diagnosability● Server tracks active URIs and client IPs in real time

> Exposed through HTTP at /.perf> Available with admin CLI's get-perfdump

command> get-perfdump can list active URLs even if

server appears “hung”● Additional fine-grained log messages

> Provide insight into server's operation> Only logged when log level is set to fine, finer, or finest