Java^TM Plug-In and Applet Architecture
for JavaSE 6u10

Applet Developer's Guide > Java Plug-In and Applet Architecture

Contents

• Architecture
  • Java Runtime Environment
  • Java Runtime Environment Version Selection
  • Thread Considerations
  • Classloader Cache and Interaction between Applets
  • Applet Garbage Collection
  • Applet Privileges
  • Cookie Support
  • Proxy Configuration
  • Security
• Best Practices for Applet Development

This document explains various aspects of applet execution including interactions with other applets as well as the web browser.

Architecture

Java Runtime Environment

With the next-generation plugin implemented in JavaSE 6u10, the JRE no longer runs inside the browser. Instead, the JRE runs in a separate process. By default, all applets run in the same JRE instance. However, applets can now specify the JRE version they require to run on. More than one JRE instance will be launched when different versions of the JRE are needed, or when the applet requires more resources than any currently extant instance can supply.

The browser and the applet can still communicate with one another, however. Existing APIs have been re-engineered to use process sockets, so things continue to work as they did before--only better. This architecture provides a number of benefits:

• Applets that require different versions of the JRE can run simultaneously. 
• Applets can specify JRE start-up parameters such as heap size. (A new applet uses an existing JRE if it's requirements are a subset of an existing JRE, otherwise, a new JRE instance is launched.) 
• The message-passing interfaces are written in Java, so they run on all supported platforms, in the same way, so cross-browser compatibility is enhanced.

With that architecture, a new JRE can be launched whenever it is needed. But an applet will run in an existing JRE as long as:

1. The JRE version required by the applet matches an existing JRE, and
2. The JRE's launch parameters satisfy the applet's requirements

Note:

• If two applets each require a large amount of memory, they might both run in the same JRE, causing one of them to run out of memory. But that's only a concern when you have multiple applets running simultaneously.
   
• The Java browser plugin finds available JREs by inspecting the Java Control Panel.

Java Runtime Environment Version Selection

On all platforms, the new plug-in locates JREs to use from the entries listed in the Java Control Panel ("Java" tab, "View" button under "Java Applet Runtime Settings"). The available JREs in this list are encoded in the deployment.properties file whose location is platform-dependent. On the Windows platform, it is generally located in C:\Documents and Settings\[username]\Application Data\Sun\Java\Deployment. On Unix platforms, it is generally located in ~/.java/deployment/deployment.properties.

On Windows platforms, both the Java Control Panel and the new Java Plug-In will automatically detect the installed JREs and add them to the available set. On Unix platforms, auto-detection of installed JREs is not supported. The Java Applet Runtime Settings dialog in the Java Control Panel may be used to manually add JREs to the known list for the new Java Plug-In.

By default the new Java Plug-In will execute all applets in the latest JRE version named in this list. It will only execute an applet on an earlier JRE version if explicitly requested.

When considering a request to launch an applet on a specific JRE version (for example, a particular update release like "1.5.0_11"):

1. The list of available JREs is consulted. If there is an exact match of the version string, that JRE version is selected. Otherwise, if there are one or more installed JREs in the same family, the latest version is selected. Otherwise, the latest available JRE on the machine is selected.
2. The selected JRE version is compared against the security baseline for the family. If it is equal to or more recent than that version, no further prompting is done and the applet is launched.
3. Otherwise, the code for the applet is downloaded in a JVM instance of the selected JRE version. If the applet is signed and the user accepts the security dialog for the applet (or the code source has already been trusted), no further prompting is done and the applet is launched.
4. Otherwise, we are dealing with an unsigned applet on an "older" JRE version. A dialog box is presented indicating that this applet is requesting to run on top of an older JRE release, and asks the user whether he or she wants to allow it to. If the user clicks "yes", the applet is launched. If the user clicks "no", the applet is re-launched on top of the latest available JRE version.

When considering a request to launch an applet on a particular family, the most recent JRE from that family will be selected and the above steps starting from (2) will be followed.

When considering a request to launch an applet on a particular family or any later family, the latest available JRE will be used to launch the applet.

Thread Considerations

A web browser's JavaScript interpreter engine is single thread. The Java Plug-in is capable of managing multiple threads. The Java Plug-in creates a separate worker thread for every applet. Applets themselves may be multi-threaded. Applets making JavaScript to Java calls and vice versa, should be designed with the thread related issues in mind.

The following picture shows the thread interactions between the JavaScript Interpreter, Java Plug-In and an applet (i.e. Java).

When the JavaScript interpreter is idle, the Java Plug-In executes a JavaScript to Java call on the per applet worker thread (JavaScript Interpreter Not Busy scenario).

When a Java to Javascript call is in progress and a JavaScript to Java call is made, the latter is executed on the same thread that made the Java to JavaScript call (Round Trip scenario).

When a thread is executing a Java to JavaScript call, another thread wanting to do the same will be blocked till the first thread has received its result and is done (JavaScript Interpreter Busy scenario)

In order to avoid thread related issues especially when multiple applets are running simultaneously, keep both Java to JavaScript and JavaScript to Java calls short and avoid round trips, if possible.

Classloader Cache and Interaction between Applets

Normally, if two applets have the same codebase and archive parameters, they will be loaded by the same class loader instance. This behavior is required for backward compatibility, and is relied on by several real-world applications. The result is that multiple applets on the same web page may access each others' static variables at the Java language level, effectively allowing the multiple applets to be written as though they comprised a single application.

While this feature enables certain kinds of applications to be conveniently written, it has certain drawbacks. It interferes with termination of applets, in particular when multiple instances of the same applet are active. It makes the programming model for applets more complex, since it is under specified exactly when the static fields of an applet will be re-initialized, and when they will be maintained from run to run of the same applet. It causes imprecise behavior of certain user interface operations within the Java Plug-In due to the inability to identify exactly which applet initiated a particular request.

For this reason, the new plug-in provides a way to opt out of the use of the classloader cache on an applet by applet basis.

Applet Garbage Collection

Garbage collection occurs on an applet instance immediately after the destroy method finishes. The garbage collection applies to all memory acquired by the applet, except for static variables . Statics are preserved in the classloader cache, along with the classes themselves, for as long as the class loader is present.

So when does the class loader go away? That behavior is not specified. It's up to the implementation of the Java virtual machine and its interactions with the operating system. You can expect it be retained for as long as possible, but to be discarded when the memory is needed for other purposes.

Applet Privileges

An applet runs in a secure sandbox that prevents it from interacting with the users system, unless authorized. To obtain that authorization, the applet can provide a security certificate that the user must accept. A security certificate is needed to:

• Print
• Access the file system
• Access browser cookies
• Access other system resources

The basic applet security model is an all or nothing proposition. If you get a security certificate, you can give the applet full access to the user's system. Without it, the applet has virtually no access at all.

Deployment of applets using JNLP allows them to avail a more fine-grained security model (similar to Java Web Start applications), that gives them controlled access to a user's system, under control of the user. (For example, the ability to save or open a file selected by the user and the ability to print.)

For more information:

• Java Web Start API Examples
• Java Web Security Certificates

Cookie Support

See Cookie Support in the Java Deployment Guide for details.

Proxy Configuration

See Proxy Configuration in Java Deployment Guide for details.

Security

See Security in Java Deployment Guide for details.