Adobe ColdFusion Events April 10-17

We had a fantastic time meeting so many of our customers at the last events in February so we're continuing these small events in April before the D.C. Summit. 

This time we're going to Seattle, Vegas, Los Angeles, New York, and San Francisco!  

April 10: Las Vegas, NV 

              Venue :: The Venetian Las Vegas,3355 S Las Vegas Blvd, Las Vegas, NV 89109

April 11: Los Angeles, CA

             Venue :: JW Marriott Los Angeles L.A. LIVE, 900 West Olympic Boulevard, Los Angeles, CA  90015

April 12: San Francisco, CA

              Venue ::  Adobe Systems Incorporated, 601 Townsend Street, San Francisco, CA 94103

April 14: Seattle, WA

               Venue :: W SEATTLE, 1112 Fourth Avenue, Seattle, WA 98101

April 17: New York, NY

               Venue :: Adobe Systems Incorporated, 1540 Broadway, Suite 1010, New York, NY 10036

Breakfast will be served, and the events will take place from 9am to 12pm 

To register for any of these events, please email Kishore@adobe.com and indicate which location/date and how many seats you'll need.

See you there!

Adobe ColdFusion Government Summit – Washington, D.C

We are excited to announce the second Adobe ColdFusion Government Summit happening in Washington, D.C on April 18th-19th.

This year we are having a Pre-conference sessions on April 18th focussed on security and steps on how to change the look and feel of your applications. This is a BYOD session and space is limited to 50 attendees.

The conference is on April 19th and we are having two tracks. We have sessions from experts in the community which would cover most of the major features of ColdFusion.

The conference is FREE to attend, just register at the link provided below.

Register Herehttp://carahevents.carahsoft.com/Event/Details/21445-adobe

Event Time : 8:30 AM – 4:00 PM

Location: Washington Marriott at Metro Center
              775 12th Street NW
              Washington, DC 20005

The event is complimentary, and breakfast and lunch will be provided.

Detailed Agenda would follow soon.

 

 

 

ColdFusion 10 “Core Support” ends in May 2017

I made a post last week regarding this and now would like to pass this on to wider audience, as well.

The “Core Support” for ColdFusion 10 ends on May 16, 2017. That means, no more Security patches/updates by Adobe for this version of ColdFusion after mid of May 2017. The detailed timelines are mentioned here in the EOL Matrix.

What is Core Support then? Core support is the time frame wherein the product and the support programs are available. This provides, five years of product support from the general availability date of a product.

General availability  is the date when the product and the support programs are announced and available for purchase.

Extended support provides an additional two years of Platinum Maintenance and Support services after the end of Core Support. Extended Maintenance and Support provides the extra time you may need, to plan your migration to Adobe’s latest technology. Here is the source.

So, if you are on version 10 or prior then, its the correct time for you to upgrade. This will ensure your eligibility of getting Security updates and patches timely from Adobe, for the supported versions of ColdFusion, as and when released.

Adobe ColdFusion Roadshow February 13-21 *Hotels Updated*

Come join the Adobe team as we begin the year with a series of events on the East Coast!  Breakfast will be provided, and you'll hear about the latest roadmap and direction of Adobe ColdFusion along with more detailed plans over then next couple of years.  

The events will be held from 8:00am to 11:00am at hotels in the following locations.

 

February 13: Philadelphia, PA

Philadelphia Marriott Downtown

1201 Market Street

Philadelphia, PA 19107

 

February 15: Durham, NC

Marriott at Research Triangle Park

4700 Guardian Drive

Durham, NC 27703

 

February 17: Orlando, Fl

JW Marriott Orlando, Grande Lakes

4040 Central Florida Parkway

Orlando, FL 32837

 

Please RSVP with the number of attendees to kishore@adobe.com to reserve your spot.

See you there!

 

ColdFusion Nginx Connector – Initial Performance Numbers

We recently announced the availability of Nginx connector for ColdFusion 2016. This post talks about the initial performance numbers we have seen with ColdFusion and Nginx. The numbers seen are only indicative. Continued efforts are being put to improve performance on Nginx Connectors.

The Specifics on installing and configuring connector are listed in the following document,
http://cfdownload.adobe.com/pub/adobe/coldfusion/nginx/prerelease/v7/Configuring_Nginx_with_ColdFusion.pdf

 

Nginx Optimizations:
Before collecting performance numbers, a handful of optimizations were done to the Nginx Configurations. The Nginx Tuning Guide was referred before making these changes.

  • Updating the number of worker processes to use one worker per CPU.
    • worker_processes  auto;
  • Worker connections count updated to an appropriate value.
    • worker_connections 1024;
  • Keep Alive request count updated to 150.
    • keepalive_requests  150;
  • Connection queue size updated in /etc/sysctl.conf,
    • net.core.somaxconn = 65536
    • net.ipv4.tcp_max_tw_buckets = 1440000

 

Baselines and Performance Numbers:

To comparatively measure the performance of the Nginx connector, we collected baselines for the following configurations:

  • ColdFusion – Vanilla ColdFusion 2016 with requests served by the bundled Tomcat server.
  • Nginx Proxy – The traditional method to configure ColdFusion with Nginx. The nginx.conf file used for this purpose can be downloaded here.  
  • Apache Connector – Amongst the supported webservers, Apache connector is the most suitable due to parity with platforms.

Baselines were captured for two CFM pages, one, a simple Hello World, and another, a more complex CFM page which uses getRealPath, CGI variables, references static content and invokes a CFC via REST.

All requests were executed with 100 concurrent threads for the duration of 180 seconds and averaged over 3 executions. The results are listed below.

 

Simple CFM – Hello World     

 

Throughput
(req/sec)

ART
(ms)

ColdFusion

10088.80

8.67

Nginx Proxy

10301.27

9

Apache Connector

9933.70

9.33

Nginx Connector

9427.77

9.66

Nginx Connector with CFM handler only

10097.13

9

 

Complex CFM – Includes static content, getRealPath, CGI, POST Request

 

Throughput
(req/sec)

ART
(ms)

ColdFusion

36.90

2658.67

Nginx Proxy

37.13

2650.67

Apache Connector

37.53

2620.33

Nginx Connector

37.37

2635.67

 

 

 

 

 

 

 

Going by the initial numbers, performance on Apache stands uncontested. Nginx Proxy shows better performance than the Nginx connector when smaller payloads are being processed, with ColdFusion doing all the processing. This is because ColdFusion registers a large number of handlers, as seen in the connector configuration file, ‘ajp_location.conf’. Having only the CFM handler registered, results in numbers very similar to Nginx Proxy.

The other benefits that the Nginx connector provides, that Nginx Proxy does not, are CGI scope variables support and Search-Engine-Safe URL support. Additional restrictions such as having a unified webroot for ColdFusion and Nginx also come into play with Nginx Proxy, making it an impractical solution for deployments.

While we continue to work on the connector performance, do share your feedback and inputs on using the Nginx connector. 

ColdFusion 11 Update 11 and ColdFusion 10 Update 22 released

This post is to announce the release of ColdFusion 11 Update 11 and ColdFusion 10 Update 22.
Update 11 and Update 22 fix approximately 164 and 45 bugs respectively. For the list of bugs fixed in these updates, refer the following documents:
Bugs fixed with Update 11
Bugs fixed with Update 22

Follow the steps below to apply the updates:

  1. Navigate to ColdFusion Administrator -> Server Updates -> Updates.
  2. Switch to the "Settings" tab.
  3. Ensure that the update site URL is set to the right value by clicking on the "Restore Default URL" button.
  4. Click on "Submit changes" to save your changes.
  5. Switch to "Available Updates" tab. Click on "Check for Updates".
  6. "ColdFusion 11 Update 11" or "ColdFusion 10 Update 22" should be listed under the "Available updates" tab. 
  7. Click on the "Download and Install" button to install the update.

Refer the following technotes for instructions and other details related to the updates:

ColdFusion 11 Update 11 technote 
ColdFusoin 10 Update 22 technote

To apply these updates manually, download the required update by clicking on one of the applicable links below:

ColdFusion 11 Update 11 jar
ColdFusoin 10 Update 22 jar
 
To run the downloaded jar, execute the following command:
java -jar <jar-file-dir>/hotfix_0xx.jar
You should use the JRE used by ColdFusion for running the update jar (for standalone CF, it should be <cf_root>/jre/bin)
For further details on the manual application of the updater follow this help article.
 
The build number after applying this update should be:
11,0,11,301867 for ColdFusion 11;
10,0,22,301868 for ColdFusion 10.

Migration of ColdFusion BugBase to Tracker(JIRA)

We would like to inform you that we have moved to a new bug tracking and reporting application called “Tracker". This was necessary as internally at Adobe, we have now transitioned to JIRA for issue/bug tracking for all the products. While functionally Tracker is similar to the BugBase application, there are still few inherent differences, that we thought, we should highlight. The same have been listed below:

1. While logging a bug, you will see a field, Component, which is equivalent to Product Area in BugBase. Any Component in Tracker is a combination of Product Area: SubArea, for example, Administrator: Admin API, Administrator: Code Analyser.

2. You will also see fields "Status, Resolution & Reason Code", which is equivalent to BugBase’s "Status, State & Reason".

3. 'Duplicate ID' for any old bugs would be seen as a part of 'Bug Description'.

4. Voting comments for old bugs would not be seen. However, count of votes is visible for all the old bugs.

There are some issues with Tracker that we are currently working on . While using Tracker, you may face:

  • Issues in receiving mail notifications for any change in a bug.
  • Some discrepancies in the number of bugs, that you had logged or voted for.
  • Some discrepancies in the number of comments in the bug(s).
  • The field “Reported By” for all bugs is missing.

As always, we request you to test drive our new bug tracking system and send your valuable feedback, so that, we can enhance the overall user experience. We will keep you posted once we fix the issues listed above.

 

Security fix for ColdFusion Builder 3 released

An important security fix for ColdFusion Builder 3 is now available for download. For more information on the vulnerability refer APSB16-44.

You can download the patch from here (md5 checksum : b67914e27ca4fb8e0fc5ecd354e9a330). Apply this patch to secure your ColdFusion Server and Builder installation. Follow the installation instructions detailed at this technote

ColdFusion 2016 installer refreshed.

The server and express installers for Adobe ColdFusion (release 2016) have been refreshed. The installers are available for download at the ColdFusion product page at www.adobe.com. The new installer includes the following changes:

  • The API Manager installer is decoupled from the ColdFusion Server installer.
  • The new API Manager installer incorporates certain new features such as multi-tenancy, enhanced security, configurable policies, a dedicated update mechanism and support for Redis cluster and request/response compression. For a detailed description of these new features follow the links embedded in this technote. The API Manager installer would be made available very soon. We will update this post to share the location where the installer would be hosted.
  • The ColdFusion installer incorporates ColdFusion 2016 Update 3 and updates JDK to version 1.8.0_112. For details on the changes that went out with Update 3 refer the Update 3 Release Notes document. The build number for this installation should be 2016,00,03,301771.
  • The features listed below have been retired from the product and no longer ship with ColdFusion. For a detailed overview of the affected areas, refer the "Portlets" and "YUI and Spry" sections of the coldfusion-deprecated-features technote. In case you need to use any of these libraries you can download them from locations mentioned below.
    • Portlets. download (md5 checksum : 93273a7b4ab8c650e5fa9cece518e099);
    • YUI. download (md5 checksum : 827e0f8395d176ac28f46ed5e78004fd);
    • Spry. download (md5 checksum : 750c275c20b291f00c1ba92c855a09d7).

 To integrate the downloaded library, follow the instructions below:

  1. Stop ColdFusion sever.
  2. Download the libraries from the links mentioned above.
  3. Extract the downloaded files to the following locations:
    • Extract portlets.zip file to <cf_root>/cfusion directory. Update the web.xml file at <CF_HOME>/cfusion/wwwroot/WEB-INF to re-introduce the mappings mentioned in the "Portlets" section of this technote.
    • Extract yui.zip and spry.zip to ColdFusion's webroot at <cf_root>/cfusion. If your scripts directory is mapped to a non-default location (setting at CF admin > Settings > Default ScriptSrc Directory), unpack the zipped package manually and place it in the custom location following the structure in the package.
  4. Restart ColdFusion server.

If you are restoring just the YUI or Spry libraries, restarting the ColdFusion server is not required.

Revisions

20 Dec, 2016 –  added the web.xml mappings step in restoring portlets instruction. added reference to coldfusion-deprecated-features article.