Currently, GlassFish add by default the Single Sign On Valve and the Acess
Logging Valve. Those two valves affect performance and might now be enabled by
default. Other Application Server aren't enabling by default SSO and Access
Logging so when comparing out-of-the-box performace, GlassFish is always
impacted by those two features.