| Linode Forum https://forum.linode.com/ |
|
| server not responding - possible ddos? https://forum.linode.com/viewtopic.php?f=19&t=4452 |
Page 1 of 1 |
| Author: | joeformd [ Tue Jul 28, 2009 7:44 am ] |
| Post subject: | server not responding - possible ddos? |
This morning a site of mine hosted on Linode stopped responding. I quickly logged in - could see nothing obviously wrong, and restarted Apache. This did not seem to fix the problem, so I had a look at the connection stats - it seemed there was anywhere between 40 and 100 connections with the status 'ESTABLISHED'. I'm a little out of my depth here in terms of server admin - is this a sign of possible denial of service? Even though there were many connections, the cpu usage was not negligible - why would the site not respond? Do I need to increase max-clients or something? Thanks in advance for any help. |
|
| Author: | Alucard [ Tue Jul 28, 2009 9:48 am ] |
| Post subject: | |
Only 40-100? You say "stopped responding" but then you "logged in." Please define both - what part stopped responding and how did you log in? |
|
| Author: | joeformd [ Tue Jul 28, 2009 9:54 am ] |
| Post subject: | |
sorry for the lack of clarity - I meant it was not responding to browser requests for web pages - they would time out. I logged in via ssh using Putty. My current thoughts are that I maybe don't have apache set up to respond to that many concurrent requests - as the CPU/memory graphs seem to show that those resources were not maxed out. my prefork setup for apache was as follows: Code: <IfModule mpm_prefork_module> |
|
| Author: | Alucard [ Tue Jul 28, 2009 3:23 pm ] |
| Post subject: | |
Is apache running? |
|
| Author: | eas [ Tue Jul 28, 2009 4:37 pm ] |
| Post subject: | |
What kind of content are you serving? How many apache processes are actually running ('ps -eaf |grep apache |wc -l')? Being able to handle 75 clients at a time seems reasonable, unless you are really, really busy, or your clients are all on really slow connections and/or you are serving up big files. For slow clients or big files, you should look into using nginx as a front end and proxy to apache. There is some info here: http://www.linode.com/forums/viewtopic. ... 2010#22010. Nginx can serve the static files directly, but even if it isn't, it is very memory and CPU efficient, even with thousands of active connections. It can receive results from apache and then return them efficiently, freeing the apache process to move on to the next request. |
|
| Page 1 of 1 | All times are UTC-04:00 |
| Powered by phpBB® Forum Software © phpBB Group http://www.phpbb.com/ |
|