The Cryptshare Server becomes unresponsive under high load.

The Cryptshare Server becomes unresponsive under high load.

Applies to:

All versions of Cryptshare Server

Symptom:

The Cryptshare Server responds slowly when it is used by a large amount of users at a time.

Cause:

The Cryptshare Server tries to respond to all requests but cannot answer the requests faster than they arrive.

Solution:

Solution 1: Increase the Amount of Available Resources

The slowdown can be caused by the Cryptshare Server not having access to enough resources to process all requests. Increasing the available RAM or using a faster CPU can solve this.

Solution 2: Adjust the Web Server Configuration

The configuration file "resources/WEB-INF/ui-config.xml" in the Cryptshare Server installation directory can be used to adjust how the web server behaves, the following section includes comments to highlight the options that can be adjusted to improve performance under high load. You can find the full documentation for the configuration file in the Jetty Wiki.

ui-config.xml  Expand source

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN" "resources/WEB-INF/configure.dtd">
<Configure id="Cryptshare" class="org.eclipse.jetty.server.Server">
    <Arg name="threadpool">
        <New class="org.eclipse.jetty.util.thread.QueuedThreadPool">
            <Arg name="minThreads" type="int">5</Arg> 
            <Arg name="maxThreads" type="int">25</Arg> 
            <Arg name="idleTimeout" type="int">1000</Arg>
            <Arg name="queue">
                <New class="java.util.concurrent.ArrayBlockingQueue">
                    <Arg type="int">200</Arg> 
                </New>
            </Arg>
        </New>
    </Arg>
   <Call name="addConnector">
      <Arg>
         <New class="org.eclipse.jetty.server.ServerConnector">
            <Set name="idleTimeout">
               <Property name="http.timeout" default="15000"/> 
            </Set>
         </New>
      </Arg>
   </Call>
   <Call id="sslConnector" name="addConnector">
      <Arg>
         <New class="org.eclipse.jetty.server.ServerConnector">
            <Set name="idleTimeout">
               <Property name="http.timeout" default="15000"/> 
            </Set>
         </New>
      </Arg>
   </Call>
</Configure>

Additionally, other settings of the Cryptshare Server can be adjusted to improve responsiveness as described here: Advanced Cryptshare Configuration

    • Related Articles

    • Cryptshare service is not starting on Linux server

      Applies to: Cryptshare Server version 4.0.0.0 to 4.1.3.0 Symptom: The Cryptshare Service doesn't start after updating Cryptshare Server from version 4.0.0.0 to 4.1.x.x . Cause: The upgrade process cannot adjust the custom configuration during the ...

    • Configuring the Cryptshare Appliance to use a proxy server

      Applies to: All versions of Cryptshare Appliance Purpose: The Operating System of the Cryptshare Appliance needs to know the Proxy Settings to get the connection to the internet, e.g. to install OS patches, update the antivirus database etc. ...

    • Providing Cryptshare database backup to Cryptshare Support

      Applies to: Cryptshare Server version 3.12 and higher Purpose: This article describes how to create a Cryptshare database backup and provide it to Cryptshare Support via Cryptshare. Solution: Proceed as follows to create a database backup: 1. Login ...

    • Updating Cryptshare manually

      Applies to: Cryptshare Server from version 4.2.x Purpose: This is an example of the possibilities for updating Cryptshare manually. Note that manual updates should only be done if a regular update is not possible! Please make sure you have a working ...

    • Configuring Postfix mail server

      Applies to: All versions of Cryptshare Appliance Purpose: Configuring the local Postfix mail server (e.g. the address of the relay server or administrator email address) Solution: It is possible to change the Postfix configuration on the Cryptshare ...