Portal Home > Knowledgebase > Articles Database > What's happen with this error?


What's happen with this error?




Posted by HoangJav@, 08-16-2009, 12:17 AM
hello, My server i7 920 12GB Ram Cpanel CPU load average about 0,7% Ram Load average about 20% but service in httpd port very slow. and have errors Someone who know this error? And how to fix? Thank you

Posted by fabin, 08-16-2009, 01:43 AM
Someone is trying to flood port 80. You may do the following... 1. Turn "Off" KeepAlive and lower Timeout parameter in apache configuration 2. Use mod_security in apache

Posted by supportexpertz, 08-16-2009, 03:32 AM
You can make simple script to block hosts with more than some value of SYN_RECV requests using iptables. (get the IPs from the netstat command) .This may not be the best method , but for the things to get normal soon you can follow this . There are some options in sysctl that you can play with to get things work . But before that we must identify whether its a real ddos or a normal dos . If its a heavy attack as ddos , its better you contact your DC . Increase the backlog queue to support more connections in the half-open state. sysctl -w net.ipv4.tcp_max_syn_backlog="2048" Also tcp_synack_retries variable can be tweaked . Make your hosting company do these and some apache optimization can surely help .



Was this answer helpful?

Add to Favourites Add to Favourites    Print this Article Print this Article

Also Read
virtualization (Views: 602)
connection number (Views: 636)


Language: