The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Fix Tomcat by locating the layer that is failing instead of reinstalling it blindly. First establish how Tomcat is launched, then read the first startup error, verify the Java runtime and CATALINA_BASE, confirm the connector is listening, and only then investigate firewalls, DNS, or a reverse proxy. A successful Java process alone does not prove that the Tomcat service is healthy.
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
The quickest split is local versus remote: if a request to the VPS itself cannot reach the configured connector, stay with Tomcat, Java, files, permissions, or the listener. If a local request succeeds but the domain fails, examine the network path and proxy.
As an Amazon Associate I earn from qualifying purchases.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsStart with a two-minute fault split
Run these checks from the VPS. Replace tomcat with the actual unit name if your distribution uses a versioned service such as tomcat10.
sudo systemctl status tomcat --no-pager
sudo journalctl -u tomcat -b --no-pager -n 200
sudo ss -ltnp
curl -I http://127.0.0.1:8080/| What you observe | Most likely fault layer | Next move |
|---|---|---|
| The unit is failed and localhost refuses the connection | Java, service environment, files, permissions, connector, or a crashed process | Read the first meaningful journal or Tomcat log error |
| Tomcat is active and localhost returns an HTTP response, but the public address fails | VPS firewall, provider firewall, DNS, listener address, or reverse proxy | Check the public DNS result, firewall rules, and proxy target |
| Another process owns the configured port | Connector conflict | Identify the owner, stop or reconfigure it, or change Tomcat’s port |
| The request reaches Tomcat but an application returns 500 or fails to deploy | Web application or deployment configuration | Read the application stack trace and deployment messages |
| No request appears in Tomcat’s access log | The request did not reach Tomcat | Investigate the listener, firewall, DNS, or proxy before changing application code |
Do not interpret an HTTP 404 as a dead server. A 404 proves that an HTTP connector accepted the request; it usually means the requested context or resource is not deployed.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
Identify how Tomcat is being launched
The repair depends on the launch mechanism. A systemd unit can use a different Java path, working directory, user, and environment from your interactive shell. A package installation may place configuration under /etc, while a manually unpacked archive normally uses the Tomcat directory’s shell scripts.
systemd-managed Tomcat
Find likely units and inspect the complete definition:
systemctl list-units --type=service | grep -i tomcat
systemctl cat tomcat
systemctl show tomcat -p User -p Group -p Environment -p ExecStart -p WorkingDirectoryUse systemctl status for the current exit state and journalctl -u for messages from this boot. If you edit a unit or an override, run sudo systemctl daemon-reload before restarting. The journal may show a Java executable error even when a shell session can run java, because systemd does not automatically inherit your login shell’s PATH or JAVA_HOME.
Distribution package
Package layouts vary, but commonly separate immutable files from instance data. Find the active paths from the unit’s ExecStart, environment file, or process command line rather than guessing:
ps -ef | grep '[o]rg.apache.catalina.startup.Bootstrap'
tr ' ' ' ' < /proc/$(pgrep -f 'org.apache.catalina.startup.Bootstrap' | head -n1)/cmdlinePackage upgrades can replace defaults while preserving an instance directory. Confirm which conf, logs, and deployment directories the running process actually uses.
Shell scripts or jsvc
A manual installation normally starts with bin/startup.sh, bin/catalina.sh, or a daemon wrapper such as jsvc. Check the process owner and the script’s environment. Apache’s Unix daemon example directs standard output and errors to catalina.out and catalina.err; inspect those files along with the rest of the logs/ directory.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
echo "$CATALINA_HOME"
echo "$CATALINA_BASE"
ls -la "$CATALINA_BASE/logs"
tail -n 200 "$CATALINA_BASE/logs/catalina.out"
tail -n 200 "$CATALINA_BASE/logs/catalina.err" 2>/dev/nullDo not mix a shell-launched instance with a systemd-launched instance while troubleshooting. You can otherwise end up examining one process’s logs while contacting another process’s port.
Read the first meaningful error, not the final cascade
Start at the earliest fatal-looking message in chronological order. Later messages often report consequences such as failed web applications, unavailable JNDI resources, or connector shutdown after the root process has already failed.
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
Java executable and environment errors
JAVA_HOME is not defined correctly,java: command not found, or an invalid executable path means the service cannot launch the JVM.- Use the service account’s environment, not only your own:
sudo -u tomcat /usr/bin/java -version
sudo -u tomcat env | grep -E '^(JAVA_HOME|CATALINA_HOME|CATALINA_BASE|PATH)='Binding and address errors
java.net.BindException: Address already in use indicates that another process already owns the requested IP and port. A bind failure can also result from an address that is not present on the VPS. Confirm both the numeric port and the bind address in server.xml before changing anything.
Permission and file errors
Permission denied, inability to create a log, or a missing configuration file points to ownership, mode bits, or an incorrect base directory. Record the exact path in the error; fixing a different Tomcat installation will have no effect.
Deployment and application stack traces
If the server reaches a Server startup message but a WAR fails, Tomcat itself may be running. Look for the application context name, the first Caused by: line, missing classes, incompatible libraries, database failures, and invalid XML. Test the root connector separately from the failing application URL.
Verify Java compatibility and the service account’s runtime
Tomcat’s major version determines the minimum Java version. Apache documents these minimums:
| Tomcat branch | Minimum Java | Operational implication |
|---|---|---|
| 9.0.x | Java 8 or later | An older runtime can start this branch, subject to your application and security policy |
| 10.1.x | Java 11 or later | Java 8 will not satisfy the documented requirement |
| 11.0.x | Java 17 or later | Use a Java 17-or-newer runtime visible to the service account |
These are branch requirements, not a guarantee that every application will run unchanged. Check the exact Java binary selected by the unit:
readlink -f "$(command -v java)"
java -version
sudo -u tomcat /usr/bin/java -versionIf the service needs a different runtime, set an explicit JAVA_HOME in its systemd environment or distribution environment file, then reload and restart:
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallsudo systemctl edit tomcat
sudo systemctl daemon-reload
sudo systemctl restart tomcat
sudo systemctl status tomcat --no-pagerIn the editor, add an environment assignment that matches the installed JDK, for example Environment=JAVA_HOME=/path/to/jdk. Use the real path reported by your package manager or readlink; do not point JAVA_HOME at a Java executable or at a JRE directory that lacks the required tools for your setup.
Check CATALINA_HOME and CATALINA_BASE
CATALINA_HOME is the Tomcat installation. CATALINA_BASE is the instance-specific area: configuration, logs, deployed applications, work, and temp. Multiple instances can share one home while using different bases.
Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
Apache requires the instance’s conf/server.xml and conf/web.xml to exist in CATALINA_BASE. A service can therefore fail even though the Tomcat binaries are present if the base path is wrong or incomplete.
printf 'HOME=%snBASE=%sn' "$CATALINA_HOME" "$CATALINA_BASE"
ls -ld "$CATALINA_BASE" "$CATALINA_BASE/conf"
ls -l "$CATALINA_BASE/conf/server.xml" "$CATALINA_BASE/conf/web.xml"
find "$CATALINA_BASE" -maxdepth 1 -type d -printf '%fn'Compare these paths with the unit’s ExecStart and environment. Do not copy a configuration file from an unrelated instance simply because it has the same filename. Preserve the instance’s intentional settings while ensuring the required directory structure exists.
Repair ownership without making the VPS unsafe
Tomcat should run as a dedicated non-root account. Apache’s security guidance explicitly advises against running Tomcat as root. The account needs read access to the installation and configuration, plus write access only to runtime locations used by that instance.
Inspect the complete path
namei -l /srv/tomcat/conf/server.xml
namei -l /srv/tomcat/logs
sudo -u tomcat test -r /srv/tomcat/conf/server.xml && echo readable
sudo -u tomcat test -w /srv/tomcat/logs && echo writablenamei -l reveals a restrictive parent directory that ordinary ls output can hide. Check the account, group, and every parent directory before changing modes.
Grant only the needed writes
Typical writable locations include logs, temp, work, and the deployment directory if applications are deployed there. Keep binaries and configuration owned by an administrator or a controlled group. Correct ownership on the specific instance directories rather than recursively making the entire VPS or installation world-writable:
sudo chown -R tomcat:tomcat /srv/tomcat/logs /srv/tomcat/temp /srv/tomcat/work
sudo chmod -R u+rwX /srv/tomcat/logs /srv/tomcat/temp /srv/tomcat/workAdapt the paths and group to your installation. If a package manages the directories, prefer its documented ownership and permissions instead of overriding them.
Confirm the connector and port
Apache’s security documentation says, “By default, a non-TLS, HTTP/1.1 connector is configured on port 8080.” That is a default, not a promise that your instance uses 8080. The active conf/server.xml and the listening socket are authoritative.
Find the configured connector
grep -nE '^[[:space:]]*<Connector|port=|address=' "$CATALINA_BASE/conf/server.xml"Inspect each HTTP or HTTPS connector. A connector may specify an alternate port, an address, a protocol, or TLS settings. A connector bound to 127.0.0.1 is intentionally reachable only from the VPS; a public interface address or an all-interface bind is required for direct external access, subject to firewall policy.
Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
Find the actual listener
sudo ss -ltnp | grep -E ':(8080|8443)b'
sudo lsof -nP -iTCP:8080 -sTCP:LISTENUse the real configured port in place of 8080. Only one server application can listen on a particular port number and IP address. If another service owns it, identify that service before stopping anything. Alternatively, select an unused port in server.xml, restart Tomcat, and update every client or proxy that targets the old port.
Test the connector directly
curl -v --max-time 5 http://127.0.0.1:8080/
curl -v --max-time 5 http://localhost:8080/A connection refusal means no process is accepting that address and port, or a local rule is rejecting it. An HTTP status, including 404 or 500, proves that the TCP connection reached an HTTP-speaking service; continue with the status and Tomcat logs instead of treating it as a listener failure.
Separate a local Tomcat failure from a network failure
When localhost fails, do not start by editing DNS. Resolve the service, connector, Java, and permission problem first. When localhost succeeds, test the VPS’s public address from an external network and compare the path.
Firewall and provider controls
Check the host firewall (for example, its active ruleset) and any provider-level firewall or security group. Permit the public connector only when direct access is intended. If a reverse proxy is the public entry point, expose the proxy’s ports and keep the Tomcat backend private.
DNS and listener address
dig +short example.com
curl -v --max-time 10 http://PUBLIC_IP:8080/Replace the example name and address with your own values. A DNS result pointing to an old VPS, a proxy service, or an IPv6 address where Tomcat listens only on IPv4 can look like a Tomcat outage. Compare the address returned by DNS with the VPS addresses and test each address explicitly.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Use the access log as a boundary marker
If a request is absent from Tomcat’s access log, Tomcat did not process it. Apache’s troubleshooting guidance treats that absence as a reason to inspect another layer such as the firewall. If the request appears in the access log, focus on the connector, virtual host, context path, proxy headers, or application response.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Fix reverse-proxy forwarding
A proxy must target the same connector that succeeds locally. A common failure is a proxy still forwarding to port 8080 after Tomcat was moved to another port, or forwarding to a loopback address that is not reachable from the proxy’s network namespace.
Apache HTTP Server
Verify the forwarding rule, the backend port, and response rewriting. Apache’s proxy guidance uses ProxyPassReverse so redirects generated by Tomcat are rewritten for the public URL. A representative pattern is:
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
ProxyPass /app http://127.0.0.1:8080/app
ProxyPassReverse /app http://127.0.0.1:8080/appUse your actual context path and connector. Validate the proxy configuration before reloading it. Restrict the backend connector so only the proxy host can reach it when direct public access is unnecessary.
Free tools Windows power users keep installed
One-click scans. No signup required.
Nginx
For Nginx, verify the proxy_pass destination, URI path behavior, and the service’s ability to reach that address. Keep the destination consistent with the port tested by curl on the VPS. A proxy that returns 502 usually cannot connect to its configured upstream; check the Nginx error log and then test that upstream directly from the proxy host.
Proxy-specific symptoms
- A 502 or 504 generally indicates that the proxy could not obtain a timely response from Tomcat; check the upstream address, port, firewall, and Tomcat listener.
- A redirect to an internal hostname or port indicates missing or incorrect response rewriting, commonly fixed in Apache with
ProxyPassReverseand, where needed, correct forwarded headers. - A request that never reaches Tomcat’s access log points to the proxy route, DNS, or firewall rather than the application.
Handle application deployment failures separately
Once the connector accepts requests, distinguish server startup from application startup. A failed WAR can leave the Tomcat process running while one context is unavailable. Read the deployment log for the context name and the first underlying exception.
- Check that the WAR or exploded directory is in the instance’s configured deployment directory.
- Check that the Tomcat account can read the application and write its extracted files under
workandtemp. - Check database, filesystem, JNDI, and environment settings used by the application.
- Check library and API compatibility after a Tomcat major-version change; a server that starts does not prove that an older application is compatible.
Deploy one known-good minimal application or the manager context only if it is already part of your security plan. Do not expose administrative applications publicly just to test connectivity.
Treat major upgrades as compatibility changes
Do not copy an older major release’s entire configuration tree over a new installation. Start with the new release’s defaults and reapply intentional connector, host, realm, valve, and resource settings one at a time. This makes removed attributes and changed defaults visible.
Recommended Free Tools
Moving from Tomcat 9 to Tomcat 10 or later can require application changes because the Java API namespace changes from javax.* to jakarta.*. A deployment that worked on Tomcat 9 may therefore fail compilation, class loading, or startup on a newer branch even when Java itself is correctly installed. Test the application against the target branch before switching production traffic.
Safer upgrade sequence
- Record the current Tomcat branch, Java version, service user,
CATALINA_HOME,CATALINA_BASE, connectors, proxy target, and deployed applications. - Back up the instance configuration and application artifacts.
- Install the new branch beside the old one rather than overwriting it.
- Build a fresh base configuration from the new defaults.
- Reapply only required settings and migrate applications for the
javax.*-to-jakarta.*change when applicable. - Run local connector tests, review logs, and test through the proxy before changing DNS or stopping the old instance.
Choose the least risky fix
| Fix area | Scope of change | Reversibility | Security impact | Proof before closing the incident |
|---|---|---|---|---|
| Java path or version | Service environment or package selection | High; restore the prior environment | Low if the runtime remains patched | The service account’s java -version meets the branch requirement and the unit stays active |
| CATALINA_BASE or missing files | Instance layout and configuration | High with a backup | Depends on resulting ownership and modes | server.xml and web.xml are present in the active base and startup completes |
| Ownership | Specific runtime directories | High; restore recorded ownership | Positive when write access is narrowed | The dedicated account can write logs, temp, work, and intended deployment paths without root |
| Connector port or address | Tomcat and every client or proxy using it | High if the old port remains available | May reduce exposure when bound privately | ss shows the expected listener and local curl succeeds |
| Firewall or provider rule | Network policy | High; revert the rule | Potentially significant; open only required ports | An external test reaches the intended proxy or connector and unwanted ports remain closed |
| Reverse proxy route | Proxy configuration and reload | High with a config backup | Positive when the backend is restricted | Proxy-to-backend curl succeeds, access logs show the request, and public redirects use the public URL |
A complete recovery checklist
- Identify the one Tomcat instance and launch method you are troubleshooting.
- Capture systemd status, the current-boot journal, and the active Tomcat logs.
- Fix the first Java, file, permission, or bind error before addressing later messages.
- Verify the Java version as the service account and set an explicit
JAVA_HOMEwhen needed. - Confirm the active
CATALINA_HOMEandCATALINA_BASE; ensure both required XML files exist under the base’sconfdirectory. - Confirm dedicated-user ownership and narrowly scoped write access to runtime directories.
- Read the connector in
server.xml, check the actual socket withss, and resolve any port conflict. - Prove the connector locally with curl before changing DNS or public firewall rules.
- If local access works, test DNS, host and provider firewalls, listener addresses, and the reverse proxy in that order.
- Verify that proxy forwarding and response rewriting target the same connector, then retest while watching the access log.
- For upgrades, use fresh defaults and validate application compatibility instead of copying an old major release’s configuration wholesale.
Bottom line
Tomcat failures on a Linux VPS become tractable when each test proves one layer. The decisive evidence is the first startup error, the Java environment visible to the service account, the files and permissions under CATALINA_BASE, the actual listening socket, and whether the request appears in Tomcat’s access log. Once localhost works, move outward to firewall, DNS, and proxy configuration; do not keep changing Tomcat when the request never reaches it.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
