While trying to get other work done on Motherfish-II, I couldn't help but notice that machine load was over *200*, due entirely to the viewCVS CGI. Either we were being DoSed via the cgi, or it's too inefficient to even think about using. Motherfish is a server intended for *core services only*. We've been steadily forgetting that. Core services include CVS, mail and web. They include precious little else (I'm on the fence about IRC; it's core to our operation, but also the service most likely to get us attacked by kiddiez, and trelane is generally all too eager to pick fights). We've been having too much toe-stepping-onning recently and motherfish is regularly stretching past its limits. Note that core includes CVS, but not every cute web-front end for viewing it. viewcvs has been removed from the server config. I'm close to punting cvsweb too on principle. Don't put it back without discussing it with me first. Monty --- >8 ---- List archives: http://www.xiph.org/archives/ Ogg project homepage: http://www.xiph.org/ogg/ To unsubscribe from this list, send a message to 'vorbis-dev-request@xiph.org' containing only the word 'unsubscribe' in the body. No subject is needed. Unsubscribe messages sent to the list will be ignored/filtered.
lör 2003-03-22 klockan 05.56 skrev Monty:> While trying to get other work done on Motherfish-II, I couldn't help > but notice that machine load was over *200*, due entirely to the > viewCVS CGI.Ugh. Probably robots running havoc. Do you have a robots.txt file in the root forbidding access to the web CVS interface? Another thing that'd help is the FastCGI module I believe (that's apache I presume). Sourceforge successfully runs it for a quadrillion projects without dying so there must be a way of getting this to work properly. But it's a low priority as you say. Actually I find WebCVS useful from time to time, although not vital, as you say. The most obvious use is for linking in "README" and "ChangeLog" files (or similar) to web pages so they always display the current state of the project. It isn't used in the Xiph.org anyway... Linus --- >8 ---- List archives: http://www.xiph.org/archives/ Ogg project homepage: http://www.xiph.org/ogg/ To unsubscribe from this list, send a message to 'vorbis-dev-request@xiph.org' containing only the word 'unsubscribe' in the body. No subject is needed. Unsubscribe messages sent to the list will be ignored/filtered.
On Saturday, March 22, 2003, at 04:56 am, Monty wrote:> While trying to get other work done on Motherfish-II, I couldn't help > but notice that machine load was over *200*, due entirely to the > viewCVS CGI. Either we were being DoSed via the cgi, or it's too > inefficient to even think about using.Gar.> Note that core includes CVS, but not every cute web-front end for > viewing it. viewcvs has been removed from the server config. I'm > close to punting cvsweb too on principle. Don't put it back without > discussing it with me first.cvsweb hasn't been enabled since the move to motherfish-ii; we don't currently have per-site cgi directories, despite appearances. -r --- >8 ---- List archives: http://www.xiph.org/archives/ Ogg project homepage: http://www.xiph.org/ogg/ To unsubscribe from this list, send a message to 'vorbis-dev-request@xiph.org' containing only the word 'unsubscribe' in the body. No subject is needed. Unsubscribe messages sent to the list will be ignored/filtered.
Hi, I've had sleep and the morning coffee. I'll be less irritable and make clearer points. .) viewcvs is useful; never said it wasn't (just don't use it myself). Ralph: If you want to put the time into debugging the problem, feel free. I didn't clearly recall who had originally installed it and I didn't want it being blindly reenbaled; folks were having trouble even connecting last night. Whether it was a break due to some other upgrade, a DDoS or just a spider innocently running amock, it had to stop. .) Motherfish-II is a single somewhat obsolete machine (albeit not as obsolete as Motherfish-I). If any one thing goes amuck or goes wrong, it stands a chance to eliminate our entire central Net presence. Considering that xiph.org exists purely in the mind of the Net, that's bad, Ray. Now, I don't pretend that we're a vital service that requires 100% uptime, but we're currently needlessly courting disaster, compounded by not having any one admin who claims ultimate responsibility for the machine. It's not that I want, conceptually, to see the extra services go; I want to see them running on multiple machines so that a CGI error like this doesn't also compromise the rest of web, DNS, mail, CVS and so on. .) In terms of ultimate admin responsibility, it's traditionally been myself and jack on two machines. When we went to the new space, Shredder and Motherfish-I became the single Motherfish-II. I don't have time to spare to be the ultimate admin when things break. Our core development is badly bottlenecked on me as it is. Monty --- >8 ---- List archives: http://www.xiph.org/archives/ Ogg project homepage: http://www.xiph.org/ogg/ To unsubscribe from this list, send a message to 'vorbis-dev-request@xiph.org' containing only the word 'unsubscribe' in the body. No subject is needed. Unsubscribe messages sent to the list will be ignored/filtered.
Possibly Parallel Threads
- viewcvs interface
- Server cutover complete; waiting for root server DNS propogation
- Server cutover complete; waiting for root server DNS propogation
- Server cutover complete; waiting for root server DNS propogation
- Server cutover complete; waiting for root server DNS propogation