Re: Stonehenge::Throttle, round 2 - CPU used by an IP

1999-11-17 Thread Leslie Mikesell
According to Randal L. Schwartz: > > "Leslie" == Leslie Mikesell <[EMAIL PROTECTED]> writes: > > Leslie> How about an option to redirect to a different machine instead? I've > Leslie> considered digging out an old, slow 386 to handle greedy clients > Leslie> without obviously denying service

Re: Stonehenge::Throttle, round 2 - CPU used by an IP

1999-11-17 Thread Randal L. Schwartz
> "Leslie" == Leslie Mikesell <[EMAIL PROTECTED]> writes: Leslie> How about an option to redirect to a different machine instead? I've Leslie> considered digging out an old, slow 386 to handle greedy clients Leslie> without obviously denying service to them. Most evil spiders I've see don't

Re: Stonehenge::Throttle, round 2 - CPU used by an IP

1999-11-16 Thread Leslie Mikesell
According to Randal L. Schwartz: > > So, I modified my throttler to look at the recent CPU usage over a > window for a given IP. If the percentage exceeds a threshold, BOOM > they get a 503 error and a correct "Retry-After:" to tell them how > long they're banned. How about an option to redirec

Re: Stonehenge::Throttle, round 2 - CPU used by an IP

1999-11-16 Thread Autarch
On 16 Nov 1999, Randal L. Schwartz wrote: > So, here's source. Peer review requested - I'm probably turning > this in for my next WebTechniques column... It would be nice if the various package vars were configurable from a .conf file. Certainly there's no reason to hard code the history dir a

Re: Stonehenge::Throttle, round 2 - CPU used by an IP

1999-11-16 Thread Matt Sergeant
On Tue, 16 Nov 1999, Jeffrey W. Baker wrote: > Also how does this IP-based tracking work in practice? People who are > behind corporate firewalls present dual problems: one person can map to > several IP addresses if the firewall uses a cluster of proxies, and one > IP can map to many people. A

Re: Stonehenge::Throttle, round 2 - CPU used by an IP

1999-11-16 Thread Randal L. Schwartz
> "Jeffrey" == Jeffrey W Baker <[EMAIL PROTECTED]> writes: Jeffrey> That's a nifty module. I suggest that you alter your Jeffrey> threshold slightly. Instead of setting a fixed percentage of Jeffrey> CPU time, you should also consider the overall load. I know Jeffrey> I wouldn't care if on

Re: Stonehenge::Throttle, round 2 - CPU used by an IP

1999-11-16 Thread Jeffrey W. Baker
"Randal L. Schwartz" wrote: > > OK, I went one better. I now have CPU-percentage-based throttling. > The big problem on my site was not bandwidth, but how quickly the > loadav would go up when I got hammered by things like "Teleport Pro". > Hey, if you haven't seen that, go see it. Be afraid.

Stonehenge::Throttle, round 2 - CPU used by an IP

1999-11-16 Thread Randal L. Schwartz
OK, I went one better. I now have CPU-percentage-based throttling. The big problem on my site was not bandwidth, but how quickly the loadav would go up when I got hammered by things like "Teleport Pro". Hey, if you haven't seen that, go see it. Be afraid. Be Very Afraid. See http://www.tenmax.

Re: Stonehenge::Throttle, round 2 - CPU used by an IP

1999-01-17 Thread Ask Bjoern Hansen
On Tue, 16 Nov 1999, Matt Sergeant wrote: > For the unique IP in _most_ firewall cases, take the last comma separated > value of the X-Forwarded-For header: $r->headers_in->get('x-forwarded-for'); except for all the clients at 192.168.1.100 (etc). So you would have to get into "real ip / forwar

Re: Stonehenge::Throttle, round 2 - CPU used by an IP

1999-01-16 Thread Robin Berjon
At 23:26 16/11/1999 -0600, Leslie Mikesell wrote: >According to Randal L. Schwartz: >> >> So, I modified my throttler to look at the recent CPU usage over a >> window for a given IP. If the percentage exceeds a threshold, BOOM >> they get a 503 error and a correct "Retry-After:" to tell them how