Results 1 to 7 of 7
  1. #1

    Being attacked what can I do?

    From running smoothly to suddenly going to 900 write requests, my web server crashes.

    I don't want to be asking the DC to restart my machine every minute.

    They installed Squid which solved the load and seems to run smooth. But my script doesn't function properly as everything is cached.

    I then put all my images/css etc on a lighttpd server which can handle all the requests without problems.

    So now apache is only handling around 30 php requests per second. But will magically jump up to 600+.

    The DC says I'm being syn flooded.

    I have APF, deflate DDoS, etc. installed.

    Anything else I can do?

  2. #2
    I have also turned off keep alive in httpd.

    Timeout 4
    KeepAlive Off
    MaxKeepAliveRequests 300
    KeepAliveTimeout 5

    <IfModule prefork.c>
    StartServers 64
    MinSpareServers 32
    MaxSpareServers 64
    ServerLimit 1024
    MaxClients 1024
    #MaxRequestsPerChild 4000
    MaxRequestsPerChild 1000
    </IfModule>


    Everytime it crashes, Lighttpd is serving 400 connections without problems. No load.

    But Apache is huge but no difference to the number of users online my site which isn't that big.

  3. #3
    You just need to restart web server when getting syn flood attack.
    Try to identify the attack ip and ban ip range.
    You can limit connection per ip with CSF firewall.
    PremiumReseller.com Hyper-V SSD VPS USA London Singapore
    Reseller Hosting Cpanel PURE SSD CloudLinux Softaculous
    Windows Reseller Asp.NET 4.5 MSSQL 2012 SmarterMail Enterprise

  4. #4
    Join Date
    Sep 2002
    Location
    Canada
    Posts
    452
    Timeout 4
    KeepAlive Off
    MaxKeepAliveRequests 300
    KeepAliveTimeout 5
    I've had trouble in the past with a low Timeout value. It'd cause the server to crash constantly.
    Reliability Performance Integrity

  5. #5
    Quote Originally Posted by tamouh View Post
    I've had trouble in the past with a low Timeout value. It'd cause the server to crash constantly.
    Why does it crash? I thought it would be better since its not holding up the connections.

  6. #6
    check TIME_WAIT settings

  7. #7
    Quote Originally Posted by rathin View Post
    check TIME_WAIT settings
    How to do this? and where?

    Thanks.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •