Throttling?
Posted: Fri Feb 16, 2007 6:21 pm
Hi --
We've been getting hit recently with a barrage of traffic from single IP addresses. They're either comment spammers, email harvesters, or possibly someone trying to hit us with a DOS attack.
When we can, we ban the IP via htaccess or have the host do it at the firewall level. However, a number of times, s9y has brought down the server by maxing out on mysql calls and its processes running away. At one point a single IP had in excess of 7000 database connections open (and active!) I would think that there should be some sort of throttling mechanism built into s9y that would automatically ban an ip that's making dozens of requests per second.
We're currently running version Serendipity 1.1 beta 1 (I know, I know, we should upgrade -- would that help?). Any ideas?
(I can provide an error_log if that would help.)
... Ryan
We've been getting hit recently with a barrage of traffic from single IP addresses. They're either comment spammers, email harvesters, or possibly someone trying to hit us with a DOS attack.
When we can, we ban the IP via htaccess or have the host do it at the firewall level. However, a number of times, s9y has brought down the server by maxing out on mysql calls and its processes running away. At one point a single IP had in excess of 7000 database connections open (and active!) I would think that there should be some sort of throttling mechanism built into s9y that would automatically ban an ip that's making dozens of requests per second.
We're currently running version Serendipity 1.1 beta 1 (I know, I know, we should upgrade -- would that help?). Any ideas?
(I can provide an error_log if that would help.)
... Ryan