--0016e6d99d7e3d8546048197d365
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
2010/3/12 Hendrik Schmieder <hendrik.schmieder [at] jedox.com>
> Dietmar M=C3=BCller schrieb:
>
> Hi,
>>>
>>> I use since long time the apache in version 2.0 on windows 2000 (SP4).
>>> Since 4 weeks I can see (some times per day) many R in server-status.
>>> Sometimes so much that the server run full and stop working because al=
l
>>>
>>
>> threads are used. I search in web and generally the response is that i=
t
>>> have
>>> to do with dos but I'm not sure (or can't believe that)
>>>
>>> When I watch over some time the serverstatus I can see sometimes
>>> requests
>>>
>>
>> staying in R status until the configparameter timeout=3D300 (default) =
kick
>>> the
>>> request out. Sometimes this R staying requests use more then 50% from =
my
>>> reads and then after timeout all works like expexcted. Sometimes the
>>>
>>
>> complete webserver is blocked.
>>>
>>> Current I have 450 threads on apache and in background 2 clustered
>>> tomcats
>>> with a 200 threads.
>>>
>>> Can anybody explain me how it is possible that some (?) can send a rq =
to
>>> a
>>>
>>
>> webserver and don't finish the rq that the server wait for it? How can=
I
>>> solve such situations?
>>>
>>> Further: how can I identify and/or analyze a problem like this. I have
>>> now a
>>> situation where I have log the network trafik with wireshark.
>>>
>>
>>
>>> This problem start (about) at a time when we switch to a new provider.
>>>
>>> I have now version 2.0.57 but I have the problem also in the latest
>>> version
>>> from the 2.0 tree.
>>>
>>> If someone has some hint and or experience how to identify the problem
>>> -->
>>>
>>
>> thanks for any comment / hint
>>>
>>> regards Dietmar
>>>
>>
>> Hi,
>> I found the problem :-)
>>
>> http://ha.ckers.org/slowloris
>>
>> /* for the archive */
>> to isolate the problem I write a small script which store every sec
>> netstat -na
>>
>> and the after analyze it and search some hours in web I found the proble=
m.
>>
>> Might after migration to an other os follow mod is a solution:
>> http://mod-qos.sourceforge.net/
>>
>>
>> hope this help other people!
>>
>> If someone have any input about this pls let me know
>>
>> regards Dietmar
>>
>>
> And what is the root of your problem ?
>
> regards
>
> Hendrik
>
>
The root problem is, that the apache webserver is susceptible for a small
perl script what send incomplete / slow http requests and this cause that
all threads from the httpd are in reading state.
Dietmar
--0016e6d99d7e3d8546048197d365
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
<br><br><div class=3D"gmail_quote">2010/3/12 Hendrik Schmieder <span dir=3D=
"ltr"><<a href=3D"mailto:hendrik.schmieder [at] jedox.com">hendrik.schmieder [at] =
jedox.com</a>></span><br><blockquote class=3D"gmail_quote" style=3D"bord=
er-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-l=
eft: 1ex;">
Dietmar M=C3=BCller schrieb:<div><div></div><div class=3D"h5"><br>
<blockquote class=3D"gmail_quote" style=3D"border-left: 1px solid rgb(204, =
204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><blockquote class=
=3D"gmail_quote" style=3D"border-left: 1px solid rgb(204, 204, 204); margin=
: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
=C2=A0Hi,<br>
<br>
=C2=A0I use since long time the apache in version 2.0 on windows 2000 (SP4)=
..<br>
=C2=A0Since 4 weeks I can see (some times per day) many R in server-status.=
<br>
=C2=A0Sometimes so much that the server run full and stop working because a=
ll<br>
</blockquote>
<br>
<blockquote class=3D"gmail_quote" style=3D"border-left: 1px solid rgb(204, =
204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
=C2=A0threads are used. I search in web and generally the response is that =
it have<br>
=C2=A0to do with dos but I'm not sure (or can't believe that)<br>
<br>
=C2=A0When I watch over some time the serverstatus I can see sometimes requ=
ests<br>
</blockquote>
<br>
<blockquote class=3D"gmail_quote" style=3D"border-left: 1px solid rgb(204, =
204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
=C2=A0staying in R status until the configparameter timeout=3D300 (default)=
kick the<br>
=C2=A0request out. Sometimes this R staying requests use more then 50% from=
my<br>
=C2=A0reads and then after timeout all works like expexcted. Sometimes the<=
br>
</blockquote>
<br>
<blockquote class=3D"gmail_quote" style=3D"border-left: 1px solid rgb(204, =
204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
=C2=A0complete webserver is blocked.<br>
<br>
=C2=A0Current I have 450 threads on apache and in background 2 clustered to=
mcats<br>
=C2=A0with a 200 threads.<br>
<br>
=C2=A0Can anybody explain me how it is possible that some (?) can send a rq=
to a<br>
</blockquote>
<br>
<blockquote class=3D"gmail_quote" style=3D"border-left: 1px solid rgb(204, =
204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
=C2=A0webserver and don't finish the rq that the server wait for it? Ho=
w can I<br>
=C2=A0solve such situations?<br>
<br>
=C2=A0Further: how can I identify and/or analyze a problem like this. I hav=
e now a<br>
=C2=A0situation where I have log the network trafik with wireshark.<br>
</blockquote>
<br>
<blockquote class=3D"gmail_quote" style=3D"border-left: 1px solid rgb(204, =
204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<br>
=C2=A0This problem start (about) at a time when we switch to a new provider=
..<br>
<br>
=C2=A0I have now version 2.0.57 but I have the problem also in the latest v=
ersion<br>
=C2=A0from the 2.0 tree.<br>
<br>
=C2=A0If someone has some hint and or experience how to identify the proble=
m --><br>
</blockquote>
<br>
<blockquote class=3D"gmail_quote" style=3D"border-left: 1px solid rgb(204, =
204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
=C2=A0thanks for any comment / hint<br>
<br>
=C2=A0regards Dietmar<br>
</blockquote>
<br>
Hi,<br>
I found the problem :-)<br>
<br>
<a href=3D"http://ha.ckers.org/slowloris" target=3D"_blank">http://ha.ckers=
..org/slowloris</a><br>
<br>
/* for the archive */<br>
to isolate the problem I write a small script which store every sec netstat=
-na<br>
<br>
and the after analyze it and search some hours in web I found the problem.<=
br>
<br>
Might after migration to an other os follow mod is a solution:<br>
<a href=3D"http://mod-qos.sourceforge.net/" target=3D"_blank">http://mod-qo=
s.sourceforge.net/</a><br>
<br>
<br>
hope this help other people!<br>
<br>
If someone have any input about this pls let me know<br>
<br>
regards Dietmar<br>
<br>
</blockquote>
<br></div></div>
And what is the root of your problem ?<br>
<br>
regards<br>
<br>
=C2=A0Hendrik<br>
<br>
</blockquote></div><br>The root problem is, that the apache webserver is su=
sceptible for a small perl script what send incomplete / slow http requests=
and this cause that all threads from the httpd are in reading state.<br>
<br>Dietmar<br><br><br><br>
--0016e6d99d7e3d8546048197d365--
