Followup on today lists.ovirt.org http outage

--=-lMFwBS4VzHn7ryn66xGn Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi, Brian pinged me on a failure on lists.ovirt.org around 13h15 UTC. After scratching my head for a while ( since everything was running fine, despites regular Out of memory on the server ), it turned out to be a user trying to get the iso with a download accelerator. I first added more server, but without luck. So as I am more of the kind "shoot first, ask later", I did kill the connexion with iptables, then limit it with iptables ( but with some side effect ), then installed mod_limitipconn to limit to 10 tcp connexion per IP.=20 in short : - yum install mod_limitipconn - add=20 <IfModule mod_limitipconn.c> MaxConnPerIP 10 </IfModule> to /etc/httpd/conf.d/resources.ovirt.org.conf I guess we should add this in some puppet module somewhere ? --=20 Michael Scherer Open Source and Standards, Sysadmin --=-lMFwBS4VzHn7ryn66xGn Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit --=-lMFwBS4VzHn7ryn66xGn--