Since the HttpSession object is stored in VM heap memory, is there a limit to number or size of the HttpSession objects on the server?

Alex Chaffee

Yes, obviously, since session objects are stored in RAM, they are dependent on the amount of RAM installed on your server machine, and the RAM allocated to the servlet engine VM. See this FAQ for more information on avoiding OutOfMemory errors.