Slashdot Mirror

In code, noone can see your plumbing.

If your plumbing is doing its job well, nobody will ever want or need to see it.

Oh wait, you meant plumbing. My bad.

There are quite a few JBoss based tools that will let you do this and then auto deploy the app on tomcat etc

https://tools.jboss.org/featur...
https://tools.jboss.org/featur...
https://tools.jboss.org/featur...
https://tools.jboss.org/featur...
https://tools.jboss.org/featur...
etc

I use JBoss rules visual flowcharts editors for tweaking and testing a prek-12 vaccine compliance engine.

There are quite a few JBoss based tools that will let you do this and then auto deploy the app on tomcat etc

https://tools.jboss.org/featur...
https://tools.jboss.org/featur...
https://tools.jboss.org/featur...
https://tools.jboss.org/featur...
https://tools.jboss.org/featur...
etc

I use JBoss rules visual flowcharts editors for tweaking and testing a prek-12 vaccine compliance engine.

There are quite a few JBoss based tools that will let you do this and then auto deploy the app on tomcat etc

https://tools.jboss.org/featur...
https://tools.jboss.org/featur...
https://tools.jboss.org/featur...
https://tools.jboss.org/featur...
https://tools.jboss.org/featur...
etc

I use JBoss rules visual flowcharts editors for tweaking and testing a prek-12 vaccine compliance engine.

There are quite a few JBoss based tools that will let you do this and then auto deploy the app on tomcat etc

https://tools.jboss.org/featur...
https://tools.jboss.org/featur...
https://tools.jboss.org/featur...
https://tools.jboss.org/featur...
https://tools.jboss.org/featur...
etc

I use JBoss rules visual flowcharts editors for tweaking and testing a prek-12 vaccine compliance engine.

There are quite a few JBoss based tools that will let you do this and then auto deploy the app on tomcat etc

https://tools.jboss.org/featur...
https://tools.jboss.org/featur...
https://tools.jboss.org/featur...
https://tools.jboss.org/featur...
https://tools.jboss.org/featur...
etc

I use JBoss rules visual flowcharts editors for tweaking and testing a prek-12 vaccine compliance engine.

This is what happens when architectural astronauts get involved. The module system was NOT designed to solve clients' problems, it was designed to make JVM "modular" to better support IoT and "containers".

And because it's not a user-driven feature, Snoracle went wild. They designed a complicated system that basically will force a significant redesign of every large Java-based system, all the while ignoring experience of OSGi, Maven and other modular systems. Here's a nice breakdown: https://developer.jboss.org/bl...

I can add a couple of my own comments, Snoracle is _still_ enamored with code access security. They think that they need to mutilate the language to support running of privileged and unprivileged code within the same address space, separated only by module boundaries. To this end, they designed complicated rules of visibility with restrictions for reflective access. You can guess how useful this is going to be - just remember the great security of applets.

If you actually read TFA, Stark isn't vetoing Jigsaw so much as calling for a delay so they can add the features needed for read-world applications, before they finalize it and it causes a world of hurt. Originally I was like "I want my Jigsaw now, why is this guy making trouble?", but after reading his well-presented blog post I think Oracle and the Java community should be taking these concerns very seriously.

Hey, JBoss is "lightweight" and "enterprise-grade"... wait...

What have you had trouble finding? https://github.com/ansible/ans... http://vault.centos.org/ http://www.jboss.org/downloads... https://github.com/wildfly/wil...

I'd rather see people bitch about no delegates or lack of LINQ-like system.

I agree with your other points. But Java doesn't have a single LINQ-like system. But has many to chose from...

QueryDSL and jOOQ has most of the Linq-to-Object features.

Together with Java Persistence API and it's type-safe Criteria Query

I think you mean HQL, not SQL.

If you subscribe to JBoss from Red Hat for your enterprise Java needs, you will get very good support - for a lot less than Oracle is likely to charge. see: http://www.jboss.org/

There is a very active community for supporting OpenJdk, which is the code base for Oracle's Java offering. see: http://openjdk.java.net/

Java Enterprise Edition 7, has support for web sockets & HTML5, and many other related goodies.

Version 8 of the open source AppServer WildFly (JBoss community driven version), should be production ready before the end of the year: http://wildfly.org/

for alpha versions see: http://www.wildfly.org/download
for nightly versions see: https://ci.jboss.org/hudson/job/WildFly-latest-master/changes

The nightlies are good enough for testing & development.

Note that JBoss, which is backed by Red Hat, will incorporate WildFly 8 code next year.

IMHO, rejecting Google App Engine at this stage is a bit myopic, but it's your choice. :)

Among the more open-standards-focused cloud offerings, there is Red Hat's OpenShift

- https://www.openshift.com/
- https://www.openshift.com/developers/java
- https://www.openshift.com/developers/pricing
- http://www.jboss.org/openshift.html

Given that, one way to avoid SQL injection would be to simply disable the database server's SQL parser and never use it. The site's own code could still do SQL queries, etc, by building them programatically using an API, rather than by expressing them as character strings. That way there is no mechanism by which trusted code and the untrusted data might be unintentionally intermingled.

That much is true - if you use, say, Hibernate criteria APIs, or something like LINQ, then the issue simpy doesn't arise.

But that approach is overkill for the sole purpose of preventing injection (it has other advantages, though). For that, all you need is the ability to identify placeholders in a string SQL statement where data values should be inserted, such that it is always properly handled in a way that inserted data is always treated as data and not as part of the command. In other words, parametrized SQL queries.

Actually I think you can expose services via RMI-IIOP using Jboss easily. I haven't tried invoking any services from Java over IIOP though.

http://www.jboss.org/jbossiiop
http://en.wikipedia.org/wiki/RMI-IIOP

--Coder

It's important to check 3 sites: http://community.jboss.org/wiki/SecureTheJmxConsole --> Wiki site on Jboss http://community.jboss.org/wiki/SecureTheJmxConsole/diff?secondVersionNumber=47 --> This is important because the Wiki site has some missing info that you can see in this diff https://access.redhat.com/kb/docs/DOC-30741 --> Another related security problem Check your Jboss config!!

It's important to check 3 sites: http://community.jboss.org/wiki/SecureTheJmxConsole --> Wiki site on Jboss http://community.jboss.org/wiki/SecureTheJmxConsole/diff?secondVersionNumber=47 --> This is important because the Wiki site has some missing info that you can see in this diff https://access.redhat.com/kb/docs/DOC-30741 --> Another related security problem Check your Jboss config!!

More to the point, this can be avoided by correctly securing your jmx-console application on JBoss. The jmx-console allows arbitrary code to be executed with the permissions of the application server. The worm itself targets older versions of JBoss (of which there are a number of production installations), but could theoretically target newer servers as well. It's just that the worm hasn't been updated for the newer jmx-console, which I believe still allows the arbitrary code execution. It is, after all, an administration application, and can be expected to have near full control of the application server.

The JBoss Wiki has instructions on how to secure the jmx-console from remote users.

So when you're pushing data as fast as you can through a socket, the old read(byte[]) or write(byte[]) are faster? Wow, no kidding.

You do NOT use java.nio (like Jetty's SelectChannelConnector) for maximum throughput. You use it to handle persistent connections, like all those long polling requests via AJAX which return on an event or timeout after a minute. This article is like recommending Apache with its hard limits on how many requests it can serve concurrently over newer, asynchronous servers like Nginx for static media servers with keep alive enabled.

The slides even mentions the C10K problem, but what it doesn't do is mention when to use either technology - async IO for concurrency and endless scaling, and synchronous IO for pushing a 10G Ethernet link to the limits. No wait, the nio setup can do that too, 700MB/s or 5.6Gbit/sec per core on 2008 hardware should be enough to max out anything you can buy now. It's great that synchronous IO can hit 1GB/s, a whopping 30% faster, but useful? I'd say no.

For most users, you don't use either API. Lets be honest here, writing highly concurrent software is hard, why reinvent the wheel when you can get off the shelve software that can do it better? You use Jetty and choose between the SelectChannelConnector or SocketConnector, or choose between Apache or Lighttpd/Nginx depending on the traffic pattern. What you do write is the bit that accepts a whole HTTP request and returns a HTTP response, everything before and after is magic.

Unless you're a file server, each 50k sized HTTP response will require enough work to make sure you run out of CPU or Disk IO long before you hit even the 100Mb/s ceiling in most rack switches. Even if your app is fast, 16 cores x 100ms per request x 50K is only 62 Mbits. Not 5600.

But if you need to scale in concurrent client count, there's no way around async IO. The latest name to watch is Netty. In Plurk Comet: Handling 100,000+ Concurrent Connections with Netty, it scales up to 100000 concurrent connections on a quad core server with 20% CPU load.

Just stop worrying about sockets already, and start worrying about your SQL server suffering a meltdown. Even if you get manage to grow into the Facebook, it's not like using synchronous IO will save you from deploying 30000 servers, it's the application code that's slow. Zero copy, one copy, "string concatenation style twenty copies response building" socket writes don't matter at all, memcpy is cheap compared to a few lines of interpreted code, servers are cheap compared to developers, and never mind the cost of the programming gods giving these presentations.

Mina is great although the brains behind the project left and started a new project, Netty.

I've heard from multiple sources that netty tends to outperform mina although I've been using mina with no problems.

Even more so when you implement the message passing with a non-blocking IO paradigm. Something like http://www.jboss.org/netty

Sigh... It waould be better to ban your developers off SQL and into an abstraction layer that puts the queries together behind the scenes and hire a competent developer to develop that.

In the Java world they already do. It's called Hibernate (or NHibernate for .NET). It does exactly what you describe.

The only people that should be mucking about in SQL are DBAs that...

• Know what the fuck they're doing
• Have a good fucking reason to use it (stored procedures, custom reports, business functions, etc.)

Honestly, I'm not very familiar with SMARTS, but we don't do a ton of root cause analysis out of the box.

We do have an integration with Drools to be able to do correlation and root cause analysis, but we don't have much in the way of default configuration for it at the moment.

PureMPI is _slow_, it's managed and it can't work with raw links.

Windows does _not_ support process migration, clustering services is a different beast (comparable to JBoss Clustering - http://www.jboss.org/jbossclustering/ ).

Also, Windows has no good clustered filesystems (like OCFS2 in Linux). And no analogs of DRBD.

So you can use Windows for parallel processing, but Linux is almost(?) always better for HPC.

What would happen to Solaris, GlassFish, NetBeans, etc?

The NetBeans/GlassFish combo is a killer combination for developing Java EE/J2EE applications. I would hate to see those two products disappear, since they compete directly with Eclipse and Websphere from IBM.

Netbeans and Tomcat? Or what about Eclipse and Tomcat?

Last time I checked, Tomcat was just a servlet container, not a full J2EE stack.

J2EE is more than just parsing jsp files, it's also JDBC, RMI, javamail, JMS, web services and friends with several API specs, as well as Enterprise Java Beans and Servlets/Portlets...

It annoys me ever so slightly when people think Tomcat is this magical replacement for anything "java for the web". In fact, JBoss uses Tomcat as a servlet container.

In fact, even Glassfish uses Catalina, if I recall some stack traces I have seen in production...

JSF, RichFaces, Hibernate, MySQL, developed on NetBeans and served by Apache TomCat on CentOS for a state government contract.

We have to train ourselves, but that's half the fun.

The other half will be when we pull the plug on one legacy Oracle database with a per CPU cycle license the state is paying an obscene amount of money for.

... I'd say don't programm anything yourself unless you are abolutely sure it doesn't exist in some form of lib or class. Programming in Java is a PITA as it is, and it's whole point is that you don't have to build anything yourself.

In fact, Java is nearly not at all about programming but about reading docs and integrating libs and classes that provide the code you need. It's OOP Forte with the brakes removed, and one of the reasons it's considered to be so outright boring. That's why there are so many thriving alternatives such as PHP or Python, so that people can get a chance to do some result oriented coding.

You are in Java territory allready and Java now is free (speech) aswell, so continue to play the Java game and learn as much as you can about it by integrating existing code. Java-style research, doc-reading and OOP knitworking is tedious but in the end it'll pay off. Especially if you plan to advance in an suit-style big-bucks IT career. There's a reason any other PL can't get by OOP and/or the Java way of doing things beyond a certain point if they want to be taken for granted.

To go even further, I'd actually look into UML editors and CASE-Tools once you know your way around Java, as these are the most advanced in the Java world and mark the point beyond which Java loses its pain factor. I find JBoss and jBPM BPEL, JPDL and GPD particularly interesting. (If you allready feel sick reading those abrevations, then you know why a large part of me still avoids Java whenever possible :-) )

My 2 cents.

... I'd say don't programm anything yourself unless you are abolutely sure it doesn't exist in some form of lib or class. Programming in Java is a PITA as it is, and it's whole point is that you don't have to build anything yourself.

In fact, Java is nearly not at all about programming but about reading docs and integrating libs and classes that provide the code you need. It's OOP Forte with the brakes removed, and one of the reasons it's considered to be so outright boring. That's why there are so many thriving alternatives such as PHP or Python, so that people can get a chance to do some result oriented coding.

You are in Java territory allready and Java now is free (speech) aswell, so continue to play the Java game and learn as much as you can about it by integrating existing code. Java-style research, doc-reading and OOP knitworking is tedious but in the end it'll pay off. Especially if you plan to advance in an suit-style big-bucks IT career. There's a reason any other PL can't get by OOP and/or the Java way of doing things beyond a certain point if they want to be taken for granted.

To go even further, I'd actually look into UML editors and CASE-Tools once you know your way around Java, as these are the most advanced in the Java world and mark the point beyond which Java loses its pain factor. I find JBoss and jBPM BPEL, JPDL and GPD particularly interesting. (If you allready feel sick reading those abrevations, then you know why a large part of me still avoids Java whenever possible :-) )

My 2 cents.

... I'd say don't programm anything yourself unless you are abolutely sure it doesn't exist in some form of lib or class. Programming in Java is a PITA as it is, and it's whole point is that you don't have to build anything yourself.

In fact, Java is nearly not at all about programming but about reading docs and integrating libs and classes that provide the code you need. It's OOP Forte with the brakes removed, and one of the reasons it's considered to be so outright boring. That's why there are so many thriving alternatives such as PHP or Python, so that people can get a chance to do some result oriented coding.

You are in Java territory allready and Java now is free (speech) aswell, so continue to play the Java game and learn as much as you can about it by integrating existing code. Java-style research, doc-reading and OOP knitworking is tedious but in the end it'll pay off. Especially if you plan to advance in an suit-style big-bucks IT career. There's a reason any other PL can't get by OOP and/or the Java way of doing things beyond a certain point if they want to be taken for granted.

To go even further, I'd actually look into UML editors and CASE-Tools once you know your way around Java, as these are the most advanced in the Java world and mark the point beyond which Java loses its pain factor. I find JBoss and jBPM BPEL, JPDL and GPD particularly interesting. (If you allready feel sick reading those abrevations, then you know why a large part of me still avoids Java whenever possible :-) )

My 2 cents.

Strange post. Maybe I am missing something? For your first paragraph...

• Distributed transactions
• High performance message queues
• Filesystems
• SOAP

Of course there's much more out there.

Regardless, the bulk of this setup is clustered processing a shitload of data very fast, which is something that COM+ triggers on MSMQ is pretty damn good at. The automation event processing system I work on at the moment can handle a full gigabit eth pipe using MSMQ on my shitty $700 laptop at about 20% cpu, including processing, logging and updating appropriate stuff in a database and HMI app.

...and this is just a bunch of subjective MS fan boy ranting.

JBoss Cache

Antlr 3.0 has been invaluable for Drools, can't wait for 3.1 which has better performance.

We did an interview with Ter and put it on our blog
http://blog.athico.com/2007/06/interview-with-antlr-30-author-terrence.html

Mark
http://blog.athico.com blog
http://labs.jboss.org/drools homepage

http://jboss.org/

How did that happen? As long as the company you work for is willing to provide the source code for all the open source software included inside the box (ie JBoss) and specifically any tweaks/changes that the company made to it, they should be free to distribute their software however they see fit including charging for it in shrink wrapped boxes.

2 seconds of googling brought this up:

http://www.jboss.org/opensource/lgpl/faq#bundle

Hrm... seems like you are spreading misinformation.

It's irritating to have links on words if the href has nothing to do with the anchor text .

Hey everyone.. I work on the JBossTools and RHDS Team and just wanted to give some community-level info about our project.

Red Hat Developer Studio is our commercial offering of the JBossTools open source project (formerly known as JBossIDE), which has a vibrant community of users and contributors. You can check out our project(s) at the following URLs:

JBossTools main page: http://jboss.org/tools
JBossTools blog: http://jbosstools.blogspot.com/
JBossTools 2.0.0.beta3: http://sourceforge.net/project/showfiles.php?group _id=22866&package_id=242269&release_id=531957
RHDS 1.0.0.beta1 (based on JBossTools 2.0.0.beta3): http://www.redhat.com/developers/rhds/index.html

Feel free to drop by #jbosstools on freenode, we'd love to hear from you!

The only thing I can think of right now would be JBoss Portal ( http://www.jboss.org/products/jbossportal ). It doesn't have many of those fancy features but should be easily extensible.

I looked at a couple of the popular ones, installed Awffull and played with it for a bit. But it wasn't immediately
obvious to me that any of the common ones supported aggregating stats across domains / hosts. Eg, I have 10 virtual servers on this
Apache box, give me a sorted list of hits per domain/host. Probably one or more of the popular open-source stats packages
*does* do this, but I didn't feel like spending hours examining different ones and installing them. Since my needs were very basic
I just wrote something of my own.

Since all my domains are ultimately served by a Java webapp running on JBoss (I redirect from Apache to JBoss with mod_jk) I just wrote a servlet filter to write hits to a postgresql database. That's it,one table with the hostname, date-time, user-agent, and a handful of other things I care about. Now, getting the info I need is a simple as a quick sql query with pgadmin III. Although I'm looking at using the Eclipse BIRT stuff for looking at the data, as my next project.

Answering myself:

Some tables and figures are here.
Plus JBoss has answered the "study" with a nice blog entry:

OpenLaszlo is true Open Source Software, and FLEX is not.
Can I get commit access to their svn repo? Who owns the code I contribute to OpenLaszlo?

Why do you say that Flex 2 applications run much faster? They're both running on the same Flash player.
Actually Flex 2 applications utilize the new VM in Flash 9 which in a number of benchmarks shows performance improvements of 10x to 100x.

What do you mean by "the programming model is better"?
There is a lot to cover here and I'm off to see a movie in a few. I'll get back to you. But just to mention a few... ActionScript classes. Optional strong typing. Support for interfaces and extending classes.

Are there any application as complex as Laszlo Mail implemented FLEX?
JBoss is using Flex 2 to build their web based email client. Check it out on their blog.

http://wiki.jboss.org/wiki/Wiki.jsp?page=JaasSecur ityDomain

A coworker who has also been looking for options on this came across this page on JBoss's site. At first glance, it seems this is an attempt to deal with the issue first mentioned. I think it's JBoss specific though. And it's just an interface. And of course, RedHat bought them, so who knows what the future of JBoss will be.

Sounds like money well spent. The site's not even linked from TFA yet jboss.org won't respond to page loads. Very confidences inpiring from a web technology company.

http://jboss.org/jbossBlog/blog/mfleury/2006/04/01 /JBoss_the_Bad_Boys_of_Open_Source.txt

at http://jboss.org/jbossBlog/blog/mfleury/2006/04/01 /JBoss_the_Bad_Boys_of_Open_Source.txt

If you fork, you must contribute your code back to the main base.

If you fork, Marc will sue your ass.

Rails has a lot going for it, and the entire Ruby concept of focusing on code has influenced many frameworks, including Tapestry. Tapestry uses abstract properties combined with annotations (or auxillary XML files) to do the kind of meta programming that is done using class methods in Ruby, but nonetheless.

In terms of dependencies, being an Apache project causes some distribution problems w.r.t depenencies, especially when you use non-Apache projects like OGNL and Javassist. The next major release of Tapestry will build using Maven, which will make nearly all of part 1 of this article irrelevant (or at least, standard). I'm looking forward to part 2 myself, which should identify why Tapestry is so special.

Finally, within the Java community, Tapestry is fairly well known, though a regrettably small percentage have used it. The majority of the targetted readers of this article would have objected to wasting too much space describing Tapestry and its goals, just as others in this thread have objected to the lack of that introductory material. You can't please everyone (exception on Slashdot, where you can't please anyone).

... designed from the start with the idea of multiple language support
Well, yes and no. The CLR was designed so that it could run C#, VB looking like code and C++-ish code. Simultaneously, VB was ditched and a new language that could actually run on the CLR was written (VB.NET), and C++ features were jettisoned from managed C++ to allow the same. And finally Java features were dropped to allow for compatibility with the 2 others (checked exceptions, for instance - brilliant to market it as an "improvement" when they actually had no choice).

being able to write more or less equally capable code in...
See above. Can you write .NET code in a language that looks like VB? Sure. Guess it helps developers "feeling home". But you have to forget long held habits (like dates stored in doubles). So then again it's not VB. More like C# with a VB like syntax. Same with managed C++ (no multiple inheritance). And in both cases, you have to learn new libraries and a new API. In effect 80% of what is usually called "a language".

...affords far better platform specific integration than Java
Yeah, well, guess what. Reason we use Java is because the server app runs on any *x, and the client on win, linux and mac without a shred of recompile. Anyway. Corba is not a problem on Java for legacy stuff, and everybody seems to be moving to SOAP for new code :-( The one thing Microsoft did really right in that domain is the seamless integration with unmanaged C++.

...a Windows license will be a lot cheaper than the license for the J2EE app server.
*cough* JBOSS *cough* JoNas

C# is not an evolutionary step over Java. It's an evolutionary step in windows development. And the reason Java could not have done it is because they specifically made it multiplatform. And enforced it. If it wasn't for that, you'd be saying that MSJava is the best thing, and too bad if it doesn't run on other OSes.

JBOSS is a free and open source Java application server