OS: Linux, on Apache 2.0
=======
Would you know and kindly tell me if there's a way to limit X number of connections per hosted site?
Because I don't want someone with high traffic forum unfairly stealing most connections for himself, which makes other sites suffer in performance.
How can I Limit connections per IP in IIS6?
For example 10 connection per IP is allowed in a minute.
on setting up some sort of firewall who only allows 10 connections from the same ip to avoid spamming, abuse on the server.
How should i do this?
one of my friend say that if i install an apache module which one limit the users conection can help me to protect from ddos.
becaus one of my users domain is under ddos and i think that if i limit his conection, if sombody wants to do ddos and open conection foraxample up 30 he is attacker and ban.
is it right and how i can do it and limit a one user?
How is this done? from what I gether, there's nothing built into apache which can do this which I personally think is a bit silly as it seems like a common thing. Can anyone offer any help (for apache 2).
View 5 Replies View RelatedI have a powerful 8 core 8gb ram web server with scsi raid drives running RedHat EL 4. This server handles 2,000 - 3,000 HTTP requests per second via Litespeed httpd without strain (over 60%+ CPU idle time during peak load, under 1% IO wait). As the traffic volume continues to increase I've encountered a strange problem, the symptoms of which are as follows:
- About 1/4 or 1/3 of new connections are not answered by the server - they time out.
- All connections that are answered have exactly 3 seconds added to the time it takes to establish connection with the server (can be seen as "Connecting to ..." phase in FireFox). HTTP response times were tested by Pingdom from multiple locations all over the world.
- The problem is either "on" or "off", it is not gradual.
- Server ping is unaffected during the problem - no delay and no packet drops.
- The problem does not happen during off-peak hours of the day.
If litespeed httpd settings are tweaked to keep as many connections as possible in keepalive state for as long as possible, the problem is avoided, while tens of thousands of connections are kept in keepalive state.
Possible causes that were tested and eliminated: PHP/MySQL load (problem applies to static files exactly the same), CPU / IO / RAM, network uplink, hardware firewall, DNS.
This makes me think that there is some kind of bottleneck of how many NEW connections per second the server can accept. By maxing out keepalive quantity and duration I'm reducing the number of new connections per second. This is a temporary fix that will only work up to a certain point.
After investigation, litespeed staff verified that my litespeed configuration was correct and after some testing said that nothing in litespeed was responsible for this limiting factor. Litespeed process uses relatively little CPU and can definitely handle more volume.
Following sysctl.conf values were increased substantially to see if that will make a difference: tcp_max_syn_backlog, tcp_max_tw_buckets, tcp_max_orphans, netdev_max_backlog, somaxconn, file-max. This didn't produce any results. Disabling syncookies didn't help either. dmesg doesn't have any notices of limits being hit or throttles being applied.
Litespeed staff suggests that likely some limit in linux kernel is being reached. The strange 3 second delay does seem like an "intelligent" DDOS protection strategy of some sort. Perhaps this is some kind of kernel level DDOS protection?
Some limit connection mods can limit max connections per vhost, any mod can limit connections to apache server per IP?
View 3 Replies View Relatedwindows 2003
limit connections per ip to a port
im currently using routix netcom
it can limit the connections( NOT bandwidth) only but not per ip
another firewall which limit connections per ip
When I SSH'd into my box, I received this message:
example.pl is on this server. HTTPD connections have been limited to restrict this script from overloading server. All servers that have hosted this file need to have extremely limited http connections or have this file removed. It is poorly written and intense on CPU/memory.
How do I go and allow example.pl to be run on my server again? I use it solely for personal sites, so I wish to not have this file blocked and be allowed to run. I've searched for almost an hour now so I figured I would go ahead and post to see if any more experienced members could assist.
I am trying to increase the PHP memory limit for all Plesk hosted sites.
I've updated the 'memory_limit' setting in /etc/php.ini
Then I ran
Code:
/usr/local/psa/admin/sbin/httpdmng --reconfigure-all
/usr/local/psa/admin/sbin/httpdmng --reconfigure-server
Checking a phpinfo() page on hosted sites I see that this setting has not been effective.
Checking some /var/www/vhosts/system/domain.com/etc/php.ini also shows the old setting, and I can see that these files have not been updated.
I note that all these domain php.ini files have been modified earlier today, all at the same time, so presumably some process did regenerate them earlier. All these files hae the "DO NOT MODIFY ..." heading
I realise that I can go the the domain in Plesk GUI and save the PHP settings to force an update, but is there anyway to force the regeneration of all of these files via CLI?
any good rule to limit Apache (port 80) connections from 1 IP to 15 with iptables/csf?
And total connections to the box to 100?
how i can limit http and mysql connection limit on per domain basis.
View 2 Replies View RelatedI've been having trouble the past few days with someone who's been "attacking" my site so to speak by continuously downloading very large files with as many connections as (he) can open. I operate a large downloads site for computer games, this person has selected the largest files (like 400-500MB). Not sure of the real intent other than to clog up my bandwidth capacity. Also he appears to be using proxies since as soon as I ban one, another shows up seeminly from China.
Anyway, I have mod_bw and I've limited the number of connections in the downloads area to 2. While that works ok, his tool uses threads like a download manager would and he's using up 30-40 child threads for his 2 file downloads.
So 2 questions,
Is there anyway to not only limit file downloads to 2, but limit the number of connections per request? Many of my visitors do use download managers and I'd like for them to continue using them but use a reasonable number of threads like 6 or 8, but not 30.
Also, is there a way to restrict access to someone using a proxy?
I need to do this:
(1) domain1.com limit to 10 connections per IP per 30 seconds but allow if accessing file beginning with x.php such as x.php?981 x.php?o19
(2) domain2.com limit to 10 connections per IP per 30 seconds only if accessing file beginning with x.php but allow if accessing file beginning with y.php y.php?981 y.php?o19 .....
i have a site typed in German, on a dot de account but it is physically located on a server in VA, USA. Does that hurt me when people search my keywords? Would it benefit me if I moved it to a server located in Germany?
View 4 Replies View RelatedCurrently I have my site hosted on a box at home, and using JIP to autoupdate the dynamic ip through zoneedit.
What am I am looking to do is to move my site to a hosted company, and keep my exhange server at home, having the dynamic ip updated through zoneedit, or other.
I have been poking around in zoneedit, and searching the web, but don't seem to be able to work it all out. (the autoupdater, JIP, wants to change the site ip at the same time)
say i have lot of traffic from USA, does my site load slower if hosted in netherlands or uk?
View 11 Replies View Relatedanyone knows file sharing/uploading site hosted on akamai server?
i know few sites where i can share video but wanna know sites where i can upload any files and share.
I have a blog (hindigo.net) registered and hosted through mydomain.com (Standard Windows Package). For the past days, it has been unaccessible most of the time (either keeps trying to load without success, or loads a blank page).
When accessing the site structure through FTP, all files are fine, and I can access the control panel without any problem.
I tried to get some info on possible server updates from the support, but their answers are not very informative:
- either a server update;
- or the site is working fine (it was indeed yesterday late, as I am in Asian time zone);
- or they ask to put DNS to NSx.MYDOMAIN.COM, while the hosting solution automatically puts NSx.MYDOMAINWEBHOST.COM
Am I the only one facing issues this past days with MyDomain.com, or is this general?
I am in the process of switching to another provider (Infomaniak.ch) anyway, but if this is a personal situation only (e.g. site attack?)
I received a call from my friend who lives in another city
in his office there are 2 computers one of them can visit my site but one of them can not
The page can not be found!
Nothing wrong with his computer because he is using internet and going here and there he only has problem coming to my site simply page can not be found.
all my domains are dead
I am hosting my domain (ex: xyz.com) on 1and1.com.
I would like to know how to host a subdomain on a different host (ex: subdomain.xyz.com ON dreamhost.com)
is there any sort of ssl certificate that will 'secure' any domain, hosted on a single server?
For example, I have the following domains and subdomains:
google.com
test.google.com
mywebsite.com
hello.example.com
All will be hosted on the same server (same IP) and I want all to be secured, through a SIGNED certificate, not a self signed. I assumed that wildcard ssl would be fine for this, but I just took a look and it's only for subdomains: example.example.com hello.example.com.
Is there any way of having every subdomain and domain secured, using ssl, through one certificate? I don't want to have to buy individual certificates for every domain, that'd be... expensive.
My server hosted with 1and1.co.uk (and therefore in Germany) has been down since 6PM UK time (20 hours ago) - support is just excruciatingly bad - the structure they have set up to make sure the actual datacentre people aren't customer facing is atrocious... you can't speak to anyone who knows anything, it's so frustrating.
I'm writing this to ask if anyone else has a root server in Germany as the latest fob off is that a router CPU has gone down knocking all those root servers offline. I'm surprised to not have seen any other threads from disgruntled customers if that were the case. They even added the router is in Canada... which begs the question - why would that knock out my German server??
My server isn't even accessible by the serial console and the reboot/recovery system isn't restoring it - they swear it's network related, but surely I'd be able to get in via the serial console?
This is winding me up good and proper, I can't concentrate on any other work and I just find myself trying to find other ways of getting any kind of real information out of 1and1 given their complete lacklustre attitude to coming forward with any themselves. 1 hour of downtime I can put up with, 20 hours without a hint of belivable feedback is just unacceptable...
Why I am getting this even when mail server is hosted with Google? Need help
WARNING: One or more of your mailservers is claiming to be a host other than what it really is (the SMTP greeting should be a 3-digit code, followed by a space or a dash, then the host name). If your mailserver sends out E-mail using this domain in its EHLO or HELO, your E-mail might get blocked by anti-spam software. This is also a technical violation of RFC821 4.3 (and RFC2821 4.3.1). Note that the hostname given in the SMTP greeting should have an A record pointing back to the same server. Note that this one test may use a cached DNS record.
ASPMX3.GOOGLEMAIL.com claims to be non-existent host mx.google.com:
220 mx.google.com ESMTP f57si1559242pyh
ASPMX5.GOOGLEMAIL.com claims to be non-existent host mx.google.com:
220 mx.google.com ESMTP i19si1284280wxd
ASPMX.L.GOOGLE.com claims to be non-existent host mx.google.com:
220 mx.google.com ESMTP d22si873775and
ALT2.ASPMX.L.GOOGLE.com claims to be non-existent host mx.google.com:
220 mx.google.com ESMTP 44si734714wri
ALT1.ASPMX.L.GOOGLE.com claims to be non-existent host mx.google.com:
220 mx.google.com ESMTP f13si1305533qba
ASPMX4.GOOGLEMAIL.com claims to be non-existent host mx.google.com:
220 mx.google.com ESMTP 54si3483902ugp
ASPMX2.GOOGLEMAIL.com claims to be non-existent host mx.google.com:
220 mx.google.com ESMTP i5si2257768mue
I just did a reverse IP lookup for my newly purchased dedicated server and found out that the domain hosts two other domains, not owned by me.
By the way, I'm yet to updated the DNS address to point to my new dedicated server.
Is this normal or I need some more clarifications from my web host?
I have a cpanel server and currently only have about 20 domain hosted, not bandwidth heavy. My dedi is Core2Duo E6550 with 8gb ram. How many domains i can host if all of my clients? How many is too many? I don't like to oversell just to get extra money?
View 10 Replies View Relatedspeed(time) with which a DNS setting change to a different IP will show up on a query.
Also, what's the fastest way to do this?
Is there someone I can buy my own IP from?