users@glassfish.java.net

Re: Glassfish application protection

From: Shreedhar Ganapathy <shreedhar.ganapathy_at_oracle.com>
Date: Tue, 08 Jun 2010 16:37:54 -0700

On 6/8/10 4:35 PM, Witold Szczerba wrote:
> 2010/6/9 Witold Szczerba<pljosh.mail_at_gmail.com>:
>
>> As far as I know - it is not desirable to have more than one
>> independent application deployed in one instance/domain in Glassfish
>> (and any other JEE server). The lowest level problem is that all those
>> applications would share a single virtual machine instance. If one
>> application goes crazy and, for example, make the JVM run out of
>> memory - all other applications will die as well. Once any application
>> call System.exit(0) - all the others are gone. Once any application do
>> something stupid like bytecode manipulation of some server specific
>> class - all the other applications are in troubles.
>> You could try to fight this using maybe Java Security, but... well.
>> That would be much better to put separate applications on separate
>> instances.
>>
>>
> Just to make things clear - the solution (in case of Glassfish v2
> series) would be to create separate domains:
> asadmin create-domain ....
> for each application (or group of applications).
>

Or deploy each application to a different cluster of instances within a
domain.

> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: users-help_at_glassfish.dev.java.net
>
>