[ATrpms-users] Access blocked to atrpms.net?

[Axel Thimm]

On Wed, May 03, 2006 at 05:22:28PM -0500, Roy Stogner wrote:
> 
> I've seen atrpms access go down temporarily in the past when I didn't
> keep up with the domain name changes, but this is the first time I've
> seen the respositories (and website!) inaccessible from my work IP
> address but working fine from home.
> 
> Is 146.6.103.21 being blacklisted for any reason?  That's the NAT box
> behind which I'm administering 18 Fedora Core machines which recently
> switched from apt (which can easily share cached RPMs over NFS) to
> smartpm (which seems to insist on deleting it's cached downloads after
> installation).  I hope having one IP suddenly downloading the same
> sets of files 18 times in a row didn't look too much like a denial of
> service attack.  I've disabled my atrpm channels for now, and if
> bandwidth is a concern I can point them to a caching HTTP proxy before
> reenabling them.

It's like you say, I've been DoS'd by download accelerators, buggy yum
setups (yum is supposed to only open up one connection) and the
like. Unfortunatley smart is also downloading in parallel adding to
the problem.

The effect is that a single download accelerator pulling down an ISO
may consume up to 200-250 httpd processes and I end up with oom and a
crashed server. So I've added a temporary blocker to anything hitting
more than 40 simultaneous connections. That's a temporary measure
until I finish the migration to new hardware (and OS) that will be
able to better cope with this.

I've added your IP to the whitelist.
-- 
Axel.Thimm at ATrpms.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.atrpms.net/pipermail/atrpms-users/attachments/20060507/0fc1c1f0/attachment.bin