Yesterday, I had a DoS attack on a php/mysql webpage which uses a lot of resources. I have learned today, as a for instance, in the last hour, about 3000 requests for that page were made by 610 different servers, mostly from 'odd' places... China, Russia, Poland, Turkey... the usual suspects from my experience. The bottom line is this... I hit server loads of 142 yesterday!!! And the server never crashed! Yeah, it might as well have been dead, but it wasn't. Yes, some things shut down temporarily... but the machine never went down. This is a remote server, about an hour away.. It took about 20 minutes for my mysqld stop command to execute, but with time it did respond! I'm extremely impressed by this and just wanted to pass this 'trivia' along. EL rocks! Best, John Hinton
>>> sender: "John Hinton" date: "Wed, Oct 12, 2005 at 04:51:48PM -0400" <<<EOQ > Yesterday, I had a DoS attack on a php/mysql webpage which uses a lot of > resources. I have learned today, as a for instance, in the last hour, > about 3000 requests for that page were made by 610 different servers, > mostly from 'odd' places... China, Russia, Poland, Turkey... the usual > suspects from my experience. > > The bottom line is this... I hit server loads of 142 yesterday!!! And > the server never crashed! Yeah, it might as well have been dead, but it > wasn't. Yes, some things shut down temporarily... but the machine never > went down. This is a remote server, about an hour away.. It took about > 20 minutes for my mysqld stop command to execute, but with time it did > respond! I'm extremely impressed by this and just wanted to pass this > 'trivia' along. EL rocks!It rocks even better... :) I've had it hit 200+ load and it went smoother than others did on a load of 20... If was a webservers with *many* webpages hit by spiders. A good night to everyone (if it is night in your part of the world too :) ), Alex
John Hinton wrote:> Yesterday, I had a DoS attack on a php/mysql webpage which uses a lot > of resources. I have learned today, as a for instance, in the last > hour, about 3000 requests for that page were made by 610 different > servers, mostly from 'odd' places... China, Russia, Poland, Turkey... > the usual suspects from my experience. > > The bottom line is this... I hit server loads of 142 yesterday!!! And > the server never crashed! Yeah, it might as well have been dead, but > it wasn't. Yes, some things shut down temporarily... but the machine > never went down. This is a remote server, about an hour away.. It took > about 20 minutes for my mysqld stop command to execute, but with time > it did respond! I'm extremely impressed by this and just wanted to > pass this 'trivia' along. EL rocks!Back in the "good 'ol days" we could just add a page full of /16's, flushing all traffic from naughty places, to the iptables deny list and call it a day. Now, my company has customers in some of these "troublesome" countries so we can't drop all their packets on the floor. 8-( That's good news about your server staying up. What does its hardware config look like? Cheers,