Portal Home > Knowledgebase > Articles Database > What's happen with this error?
What's happen with this error?
Posted by HoangJav@, 08-16-2009, 12:17 AM |
hello,
My server i7 920 12GB Ram Cpanel
CPU load average about 0,7%
Ram Load average about 20%
but service in httpd port very slow.
and have errors
Someone who know this error? And how to fix?
Thank you
|
Posted by fabin, 08-16-2009, 01:43 AM |
Someone is trying to flood port 80. You may do the following...
1. Turn "Off" KeepAlive and lower Timeout parameter in apache configuration
2. Use mod_security in apache
|
Posted by supportexpertz, 08-16-2009, 03:32 AM |
You can make simple script to block hosts with more than some value of SYN_RECV requests using iptables. (get the IPs from the netstat command) .This may not be the best method , but for the things to get normal soon you can follow this .
There are some options in sysctl that you can play with to get things work . But before that we must identify whether its a real ddos or a normal dos . If its a heavy attack as ddos , its better you contact your DC .
Increase the backlog queue to support more connections in the half-open state.
sysctl -w net.ipv4.tcp_max_syn_backlog="2048"
Also tcp_synack_retries variable can be tweaked . Make your hosting company do these and some apache optimization can surely help .
|
Add to Favourites Print this Article
Also Read