Am I right that ColdFusion's only use of Apache To...
# adobed
Dave Merrill
06/24/2025, 6:38 PMAm I right that ColdFusion's only use of Apache Tomcat is for the admin UI?
t
Tim
06/24/2025, 6:41 PMI'm pretty sure you can set it up as a site in IIS, but I haven't done that in a really long time.
d
Dave Merrill
06/24/2025, 6:42 PMThanks, but that's not exactly what I'm asking.
CF doesn't use Tomcat for anything besides the admin UI, right?
t
Tim
06/24/2025, 6:44 PMmm. after the reworded question, I don't know the answer to that.
b
bdw429s
06/24/2025, 6:52 PMNo, the entire ColdFusion WAR is deployed on Tomcat
bdw429s
06/24/2025, 6:52 PMSo every request is going through that servlet container
bdw429s
06/24/2025, 6:52 PMUnless, of course, you deploy on another servlet, for example, CommandBox
d
Dave Merrill
06/24/2025, 7:05 PMThanks Brad.
Not what I'd hoped.
We can't update Tomcat ourselves, right?
s
SteveJ
06/24/2025, 7:15 PMI've heard of people updating Tomcat with limited success. I've always told my team to wait until Adobe releases an update with a newer secure version of Tomcat. That usually pisses off InfoSec and they threaten to turn off our Internet access, and then eventually Adobe finally upgrades Tomcat and things settle down. Usually somewhere in there is when I ask my CFP how long until I can retire. 😉
😳 1
b
bdw429s
06/24/2025, 7:16 PMIf you deploy a CF WAR directly on top of a Tomcat install (requiring an Enterprise license) you can control Tomcat 🙂
👍 1
bdw429s
06/24/2025, 7:16 PMOne of the downsides of CF embedding a custom version of Tomcat is you don't have control over it
bdw429s
06/24/2025, 7:16 PMYou can prolly try to update jars, but you'll be left with an install they certainlky won't support
d
Dave Merrill
06/24/2025, 7:32 PMCan't get to Tomcat 10 without going all the way up to CF 2025, 2023 is still v9.
Grrrr.
😞 1
b
bdw429s
06/24/2025, 7:33 PMYeah, the new versions of tomcat use newer versions of the jakarta spec and CF itself internally is not compat with it all
bdw429s
06/24/2025, 7:33 PMI already ran into this with CommandBox's jakarta version. I couldn't go the latest/greatest because CF internally was still using removed parts of the servlet API
bdw429s
06/24/2025, 7:34 PMWhen I asked about it here, they said when they had started their development they had locked into the current version of tomcat at the time and it was too late to switch now (this was during the 2025 betas). Unfortunately, I don't think they pivot super fast on those things since it means having to go back and re-test.
3 Views