Mantis - Resin
Viewing Issue Advanced Details
1351 minor always 09-18-06 09:13 02-12-07 10:39
ferg  
ferg  
normal  
closed  
fixed  
none    
none 3.1.1  
0001351: improved DOS support
(rep by Matthias Jiderhamn)

We are having some trouble with recurring DDoS/DoS attacks on one of
our Resin servers. While being attacked, it seems most of the threads
in the thread pool are connected but waiting for request input inside JNI code:

   com.caucho.vfs.JniStream.readNative(Native Method)
   com.caucho.vfs.JniStream.read(JniStream.java:98)
   com.caucho.vfs.ReadStream.readBuffer(ReadStream.java:922)
   com.caucho.vfs.ReadStream.waitForRead(ReadStream.java:289)
   com.caucho.server.port.TcpConnection.run(TcpConnection.java:386)
   com.caucho.util.ThreadPool.runTasks(ThreadPool.java:507)
   com.caucho.util.ThreadPool.run(ThreadPool.java:433)
   java.lang.Thread.run(Thread.java:595)


Could setting a lower read-timeout
(http://www.caucho.com/resin-3.0/config/tuning.xtp#Timeouts) [^] ease the effect?
What would be sensible values?

Notes
(0001760)
ferg   
02-12-07 10:39   
Added throttle-concurrent-max to <http>, e.g.

<http port="80" throttle-concurrent-max="16"/>