Project

General

Profile

Actions

Bug #2120

closed

lighttpd freezes under flood

Added by scub over 14 years ago. Updated 4 months ago.

Status:
Obsolete
Priority:
High
Category:
mod_secdownload
Target version:
-
ASK QUESTIONS IN Forums:
No

Description

i am using mod_secdownload. every time someone request a file mulitple times lighttpd lock up and freezes, i have to restart lighttpd for the server to come back online.

i get several hundred request in a matter of mins for the same file, i am not sure if this occurs when someone is using a download accelerator? mod_secdownload tiggers the HTTP error 410, so i am not sure if the actual flood is 410 "gone" request or the actual file (since it's expired after a few minutes according to my settings).

happens about once or twice a day and lighttpd stays locked up and won't respond to requests until restarted. a little http flood shouldn't be locking up a Dual Quad 8GB RAM server.. what is the cause? kind of sucks the site can be taken offline by a simple download file flood. i had this problem in 1.4 also appears to have it since trying lighttpd 1.5

logs snip of flood (several hundred times):

203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:51 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:51 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 206 557436 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:51 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:51 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 206 541120 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:52 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:52 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:52 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:53 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:53 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:53 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:54 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:54 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 206 567656 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:54 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:54 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:54 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:54 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"

Actions #1

Updated by scub almost 14 years ago

any word on this? still having this problem... when person floods "GET" requests to download file, lighttpd just stops responding.. this is obviously a serious flaw in lighttpd and must be looking into imo..

Actions #2

Updated by nitrox almost 14 years ago

  • Status changed from New to Need Feedback
  • Priority changed from High to Normal

Don´t use "High" if you aren´t sure it is a severe bug. So for now I assume it isn´t, as 410 is an answer - and the correct one btw. Else add a gdb/strace output on where lighty is crashing.

Actions #3

Updated by icy almost 14 years ago

  • Priority changed from Normal to High
  • Target version deleted (1.5.0)

If it indeed freezes then it is high priorty. But I don't think it's mod_secdownload that is to blame.

Maybe the server is just running out of file descriptors? Who knows.

Please provide errorlog, gdbbacktrace and strace log when it locks up. Thanks

Actions #4

Updated by gstrauss about 8 years ago

@scub: I realize this was a long time ago, but we need a little more information in order to try to reproduce this. Hopefully, this is not still an issue for you. :)

Actions #5

Updated by stbuehler about 8 years ago

  • Status changed from Need Feedback to Missing Feedback
Actions #6

Updated by gstrauss 4 months ago

  • Status changed from Missing Feedback to Obsolete
  • ASK QUESTIONS IN Forums set to No

mod_secdownload is no longer part of lighttpd base distribution
For replacement, see mod_magnet and lua mod_secdownload

Actions

Also available in: Atom