logo
Apache Lounge
Webmasters

 

About Forum Index Downloads Search Register Log in RSS X


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
Post new topic   Forum Index -> Apache View previous topic :: View next topic
Reply to topic   Topic: Client opening multiple connections using same IP.
Author
david6758



Joined: 02 Feb 2010
Posts: 2

PostPosted: Tue 02 Feb '10 0:38    Post subject: Client opening multiple connections using same IP. Reply with quote

Saw the following in my log file earlier today. Using Apache ver. 2.2.14. KeepAlive, and all affiliated commands, are at their default values.

24.131.122.205 - - [01/Feb/2010:13:06:12 -0500] "GET /books/The_Secret_Doctrine__AnthropogenesisV2.pdf HTTP/1.0" 206 19508816 "http://www.bing.com/search?q=secret+doctrine+pdf&first=11&FORM=PORE" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2)"
.
.
.
24.131.122.205 - - [01/Feb/2010:13:15:12 -0500] "GET /books/The_Secret_Doctrine__AnthropogenesisV2.pdf HTTP/1.0" 206 19624690 "http://www.bing.com/search?q=secret+doctrine+pdf&first=11&FORM=PORE" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2)"

I'm showing the 1st and the last, the 182nd!!!, lines. All are 206 requests. No 200 to start things. The size of the upload will vary. The actual size of the file is 30.6MB.

I would of expected MaxKeepAliveRequests to of stopped this at 100. Does the HTTP/1.0 have anything to do with this?

Regardless, how do I prevent such foolishness?

Thank You!
Back to top
glsmith
Moderator


Joined: 16 Oct 2007
Posts: 2268
Location: Sun Diego, USA

PostPosted: Tue 02 Feb '10 2:30    Post subject: Reply with quote

Sounds like a download manager to me which is why they are all different sizes. All 200+ of them probably total the 30+mb of the file.

MaxKeepAliveRequests will not stop it since this limits any one connection to that number but says nothing about opening 2nd, 3rd, Nth connection from the same IP.

How to stop, mod_limitipconn might do the trick.
You can get a windows binary of it at www.apachehaus.com since I do not see one here.
Back to top
david6758



Joined: 02 Feb 2010
Posts: 2

PostPosted: Thu 04 Feb '10 1:54    Post subject: Reply with quote

"All 200+ of them probably total the 30+mb of the file."
All 182 totaled 2.8 GB!!!

Installed mod_limitipconn but it didn't take care of the problem.

It will handle multiple simultaneous connections but not multiple connections in general. In my case I had 182 connections from the same IP over a 9 minute period. Most weren't simultaneous!

Need something that will limit the number of connections from the same IP over a specified period of time. It will work whether or not the connections are simultaneous.
Back to top
black_harry



Joined: 22 Feb 2010
Posts: 15
Location: Germany, Stuttgart

PostPosted: Thu 04 Mar '10 22:58    Post subject: Reply with quote

Hi,
I had the same problem within our Intranet.
An ISA proxy-server (-> MS) had compression enabled and so it requested on an on the same information. On the other side the clients also received the documents on an on - without re-requesting them.

I think you cannot handle this with Apache-Settings only.
If this occured only once, I would suggest to ignore it.
If it occures more often, my only idea is to look into the log-file with a program (batch-loop) and disable serving content to the client if you find it looking for the same big content again and again:
Automatically adjust httpd.conf (or a include-conf file), then do a graceful restart...
Back to top


Reply to topic   Topic: Client opening multiple connections using same IP. View previous topic :: View next topic
Post new topic   Forum Index -> Apache