jboss安全配置.docVIP

JBOSS安全与性能优化配置项 Jboss内存优化 修改这个两参数，给jvm分配适当的内存，一般为服务器的3/4内存量，推荐至少使用4G内存。另外添加两个参数 -XX:+UseParallelGC -XX:+UseParallelOldGC 这两个让服务并行回收内存空间。修改完成后，大致为 JAVA_OPTS = “-Xms4096m -Xmx8192m -XX:+UseParallelGC -XX:+UseParallelOldGC -Dsum…… 2、Jboss日志输出模式root@190MEM conf]# pwd/usr/local/jboss/server/default/conf[root@190MEM conf]# vi jboss-log4j.xmlappender name=FILE class=org.jboss.logging.appender.DailyRollingFileAppendererrorHandler class=org.jboss.logging.util.OnlyOnceErrorHandler/param name=File value=${jboss.server.log.dir}/server.log/param name=Append value=false/param name=Threshold value=ERROR/ 3、Jboss数据库连接池优化修改数据库连接池datasources local-tx-datasource jndi-nametraining_master_db/jndi-name connection-urljdbc:mysql://28:3306/dts?useUnicode=truecharacterEncoding=UTF-8/connection-url driver-classcom.mysql.jdbc.Driver/driver-class user-nameroot/user-name password/password min-pool-size100/min-pool-size max-pool-size500/max-pool-size exception-sorter-class-nameorg.jboss.resource.adapter.jdbc.vendor.MySQLExceptionSorter/exception-sorter-class-name /local-tx-datasource datasources 4、Jboss部署目录优化去掉和应用无关的部署，加快jboss运行速度bsh-deployer.xml client-deployer-service.xml ear-deployer.xml ejb-deployer.xml http-invoker.sar jboss-bean.deployer jboss-ws4ee.sar jms jsr88-service.xml schedule-manager-service.xml scheduler-service.xml sqlexception-service.xml uuid-key-generator.sar 5、Jboss应用安全加固 去掉： Tomcat status (full) (XML) JMX Console JBoss Web Console 删除deploy下的jmx-console.war/ management/ [root@190MEM deploy]# pwd /usr/local/jboss/server/default/deploy [root@190MEM deploy]# ls jmx-console.war/ management/ jmx-console.war/: checkJNDI.jsp displayMBeans.jsp images inspectMBean.jsp META-INF WEB-INF cluster displayOpResult.jsp index.jsp jboss.css style_master.css management/: console-mgr.sar 6、Jmx-console控制台加上认证web.xml 中把security-constraint的注释去掉中把security-domain注释去掉web-console控制台加上认证jboss_home/server/default