Insights · JBoss & Middleware · Issue I, MMXXVI.

JBoss Web Server, compared against stock Tomcat.

A buyer side reading of JBoss Web Server licensing: how the per core entitlement compares against community Apache Tomcat, where the break point sits in operational terms, and how to read the boundary at renewal.
By The Buyer-Side Desk, an independent advisory practice. 190+ engagements, $180M+ recovered. Published Updated
Abstract

JBoss Web Server licensing meters by core on the host running the Tomcat instance, with a packaged distribution that includes the Tomcat servlet container, mod_cluster for load balancing, and the Red Hat hardened JDK. The community Apache Tomcat is freely available. The choice between JBoss Web Server and community Tomcat licensing is a support and patch cadence decision, not a runtime decision. This note unpacks the model, names the three counting traps that recur on web tier estates, sets the break point against community Tomcat, and closes with the renewal posture.

§ 1

What JBoss Web Server actually licenses.

JBoss Web Server licensing meters by core on the host running the Tomcat instance. The product packages Apache Tomcat, the mod_cluster load balancer, the Red Hat OpenJDK, and a curated set of operational add ons into a single distribution that Red Hat supports as a unit. The community Apache Tomcat distribution from the upstream project runs the same servlet engine, but it ships without the curated bundle and without vendor support. The licensing decision is therefore not between two different runtimes but between supported and unsupported deployments of the same runtime.1

The product is sold as a standalone JBoss Web Server entitlement and as part of larger bundle structures that include other JBoss middleware. The standalone entitlement is appropriate for estates that run Tomcat as the primary servlet container and do not consume other JBoss products on the same hosts. The bundled view comes into play when the same hosts also run JBoss EAP, AMQ, or other middleware components.

For the broader middleware practice context, see the JBoss and middleware practice hub. For the benchmarking observations that underlie the unit price ranges, see the benchmarking service hub.

§ 2

The three counting traps on JBoss Web Server.

Three counting traps recur on JBoss Web Server estates. Each is correctable through reshape before audit or renewal but each can also produce a meaningful gap.

The first trap is counting cores on every web tier host when the actual servlet workload runs on a subset. Web tier farms often share hosts between Tomcat instances and other web tier components such as Apache HTTPD or NGINX. The JBoss Web Server entitlement attaches only to the hosts where the Tomcat instance runs as part of the supported bundle. Hosts running community Apache HTTPD without a JBoss Tomcat process do not consume the entitlement; the reshape is to confirm the host inventory and remove non Tomcat hosts from the count.

The second trap is licensing development and test web tier hosts at the same rate as production. The JBoss Web Server SKU has a development tier that costs materially less than the production entitlement and is appropriate for non production hosts. Operators often standardise on the production entitlement across all environments for procurement simplicity, which produces a recoverable cost gap at renewal. The reshape is to migrate non production hosts to the development tier on the next renewal.2

The third trap is treating the embedded JDK as a separate entitlement. The JBoss Web Server distribution includes the Red Hat OpenJDK as part of the bundle. The OpenJDK entitlement does not need to be purchased separately for hosts already entitled under JBoss Web Server. Operators sometimes carry a parallel OpenJDK subscription that the JBoss Web Server bundle already covers; the reshape is to retire the redundant entitlement.

Fig. 2.1 · JBoss Web Server versus community Tomcat: the tradeRHLA · 2026 Q2
Attribute JBoss Web Server Community Tomcat
RuntimeApache TomcatApache Tomcat
SupportRed Hat 24×7Community list
Patch cadenceCurated, testedUpstream only
BundleOpenJDK, mod_clusterSelf assembled
LicensingPer coreNone (Apache 2.0)
JBoss Web Server and community Apache Tomcat share the same runtime. The trade is support, patch cadence, and bundled tooling against zero per core fees and self assembled operations.
§ 3

Where the break point actually sits.

The break point between JBoss Web Server and community Tomcat is operational rather than financial alone. The financial side is straightforward: community Tomcat carries no per core fee. The operational side is the cost of self supporting the runtime across security patches, vulnerability remediation, and incident response when a servlet workload misbehaves in production. The break point sits where the operational cost of self support exceeds the per core fee plus the value of vendor support to the operator.

Three patterns recur. The first is the security patch cadence pattern, where the operator needs Tomcat patches validated and shipped on a schedule tighter than the upstream community release cadence. JBoss Web Server's curated patch stream tends to be the deciding factor here. The second is the vulnerability remediation pattern, where regulated industries require documented vendor support on production servlet containers. The community boundary cannot meet the regulatory requirement, so the break point sits firmly on the JBoss Web Server side.3

The third is the operational maturity pattern, where the platform team has the engineering capacity to operate community Tomcat independently and the workload criticality does not require vendor support. The break point sits on the community side and the savings are real. For the surrounding RHEL host base context that JBoss Web Server typically runs on, see the broader RHEL practice reading and for the related runtime question on Quarkus see the Quarkus licensing note.

§ 4

The hybrid posture across environments.

The most common operational answer is neither all JBoss Web Server nor all community Tomcat but a hybrid that aligns the entitlement to the workload criticality. Production servlet workloads on the customer facing tier run on JBoss Web Server. Internal application tier workloads with lower criticality and stronger team ownership run on community Tomcat. Development and test environments either use the development tier of JBoss Web Server for environment parity or use community Tomcat where parity is not required.

The hybrid posture works when the environment boundary is technically enforced and contractually documented. A production host running JBoss Web Server alongside a community Tomcat instance is fully in scope under the JBoss entitlement because the host is the licensing unit. The reshape requires separating the workloads onto different hosts or accepting the entitlement on the combined host.

For estates running web tier workloads on OpenShift, the question shifts because the container platform changes the entitlement chain. A Tomcat container on OpenShift consumes the OpenShift worker node entitlement; the JBoss Web Server entitlement layers on top where the supported bundle is required. The cross product reading on container platforms is treated in the Keycloak licensing note as a parallel case where the container layer interacts with the middleware entitlement. For estates using AMQ Streams on the same OpenShift cluster as the web tier, see the AMQ Streams licensing note.

The choice is not between two runtimes. The choice is between supported and unsupported deployments of the same runtime.
Practice note · The Buyer-Side Desk · on JBoss Web Server
§ 5

The renewal posture on a web tier estate.

The renewal posture on a JBoss Web Server estate has three components worth preparing before the seller side prices the next term. The first is the host inventory, which should resolve every host carrying the JBoss Web Server entitlement and confirm that hosts running community Tomcat or non Tomcat web tier components have been removed from the count. The second is the environment tier review, which should match the development tier of the entitlement to the non production hosts and the production tier only to the production hosts. The third is the bundle reconciliation, which should retire any parallel OpenJDK or middleware subscription that the JBoss Web Server bundle already covers.

The seller side at renewal often positions JBoss Web Server as the standard production servlet platform and discourages the hybrid posture. The buyer side reading is that the hybrid posture is operationally defensible where the environment boundary is enforced; the renewal conversation should treat the hybrid as the baseline and price the JBoss Web Server entitlement against the production critical share of the estate.

One industry context shifts the conversation materially. Financial services and regulated industries face audit pressure for documented vendor support on production servlet containers, which removes the community boundary as a reshape lever and pushes the count toward the full production estate. For the surrounding audit context, see the financial services audit considerations note.

For estates evaluating JBoss Web Server licensing ahead of a renewal or audit, the engagement is normally a subscription assessment scoped to the web tier with a community boundary review across the environment tiers. To begin, see the contact page.

Notes & references

  1. 1. JBoss Web Server is a per core entitlement on the host running the Tomcat instance, packaged with the Red Hat OpenJDK and mod_cluster. The runtime is identical to community Apache Tomcat. The licensing pays for the curated bundle and vendor support.
  2. 2. The development tier of JBoss Web Server costs materially less than the production tier and is appropriate for non production hosts. Operators that standardise on the production tier across all environments produce a recoverable cost gap.
  3. 3. The break point against community Tomcat is operational rather than purely financial. Patch cadence, vulnerability remediation, and operational maturity drive the boundary more than the per core fee alone.
  4. 4. The hybrid posture works on enforced environment boundaries. A production host running both JBoss Web Server and a community Tomcat instance is fully in scope under the JBoss entitlement.
  5. 5. Regulated estates often require vendor supported runtime on production servlet containers, which removes the community boundary as a reshape lever.

Preparing a response? The practice keeps a one-page Red Hat audit response checklist — what to acknowledge, what to preserve, and what not to volunteer in the first fourteen days after the letter arrives.

§ 6 · Engagement

Engage before the web tier count is read.

Two analyst calls. No fee. We tell you what the web tier entitlement should look like, where the community boundary sits, and whether we are the right firm. If a renewal sits inside ninety days, the first call happens within forty eight hours.