Bug #2120
closedlighttpd freezes under flood
Description
i am using mod_secdownload. every time someone request a file mulitple times lighttpd lock up and freezes, i have to restart lighttpd for the server to come back online.
i get several hundred request in a matter of mins for the same file, i am not sure if this occurs when someone is using a download accelerator? mod_secdownload tiggers the HTTP error 410, so i am not sure if the actual flood is 410 "gone" request or the actual file (since it's expired after a few minutes according to my settings).
happens about once or twice a day and lighttpd stays locked up and won't respond to requests until restarted. a little http flood shouldn't be locking up a Dual Quad 8GB RAM server.. what is the cause? kind of sucks the site can be taken offline by a simple download file flood. i had this problem in 1.4 also appears to have it since trying lighttpd 1.5
logs snip of flood (several hundred times):
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:51 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:51 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 206 557436 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:51 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:51 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 206 541120 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:52 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:52 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:52 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:53 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:53 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:53 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:54 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:54 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 206 567656 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:54 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:54 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:54 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
203.144.xx.xxx www.mysite.com - [14/Dec/2009:21:57:54 -0500] "GET /dl/be33215f867e5f0fea67af612f852c45/4b26fab0/media-39840.zip HTTP/1.1" 410 335 "http://www.mysite.com/media?dl=39840" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6.3; .NET CLR 2.0.50727; FDM)"
Updated by scub almost 15 years ago
any word on this? still having this problem... when person floods "GET" requests to download file, lighttpd just stops responding.. this is obviously a serious flaw in lighttpd and must be looking into imo..
Updated by nitrox almost 15 years ago
- Status changed from New to Need Feedback
- Priority changed from High to Normal
Don´t use "High" if you aren´t sure it is a severe bug. So for now I assume it isn´t, as 410 is an answer - and the correct one btw. Else add a gdb/strace output on where lighty is crashing.
Updated by icy almost 15 years ago
- Priority changed from Normal to High
- Target version deleted (
1.5.0)
If it indeed freezes then it is high priorty. But I don't think it's mod_secdownload that is to blame.
Maybe the server is just running out of file descriptors? Who knows.
Please provide errorlog, gdbbacktrace and strace log when it locks up. Thanks
Updated by gstrauss about 9 years ago
@scub: I realize this was a long time ago, but we need a little more information in order to try to reproduce this. Hopefully, this is not still an issue for you. :)
Updated by stbuehler about 9 years ago
- Status changed from Need Feedback to Missing Feedback
Updated by gstrauss about 1 year ago
- Status changed from Missing Feedback to Obsolete
- ASK QUESTIONS IN Forums set to No
mod_secdownload is no longer part of lighttpd base distribution
For replacement, see mod_magnet and lua mod_secdownload
Also available in: Atom