--=-lMFwBS4VzHn7ryn66xGn Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi, Brian pinged me on a failure on lists.ovirt.org around 13h15 UTC. After scratching my head for a while ( since everything was running fine, despites regular Out of memory on the server ), it turned out to be a user trying to get the iso with a download accelerator. I first added more server, but without luck. So as I am more of the kind "shoot first, ask later", I did kill the connexion with iptables, then limit it with iptables ( but with some side effect ), then installed mod_limitipconn to limit to 10 tcp connexion per IP.=20 in short : - yum install mod_limitipconn - add=20 <IfModule mod_limitipconn.c> MaxConnPerIP 10 </IfModule> to /etc/httpd/conf.d/resources.ovirt.org.conf I guess we should add this in some puppet module somewhere ? --=20 Michael Scherer Open Source and Standards, Sysadmin --=-lMFwBS4VzHn7ryn66xGn Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAABAgAGBQJToEbiAAoJEE89Wa+PrSK9ynwQAIHWN8p/J+KMeIcHAGciasPC jOj1uBJVHUsRScgZ5SM705MIUZ+tJCuV28/3Wowky4LExhHi36IFIo4toJ7urGPb PekQ36JNsMF+8yUl/+pWsjZpBLDt4ZcUALpqqInp04n1qEXwt1HhVjhI+BEjTnV8 eAboFC5x3o7PxpSISY6nwA3sYiG4UDWp4XSHmM6oJIrr/uAjcAJm7lpIcsVC1HWV VujzBR3fLp9A9BzgHtlN8AaU8kLjCC0UzLXbY0Q8MPIzHIdyCMKNYKqQtRc+Es5/ mwXSjpV30323iidH3vGSXuJm8WfjT4He7nmY/XdMXB6Q/3ZAwS4ktJIb28Rwmc6v 9xBw7sE6eCZHyiLYJsoqUNr5z49uBZlVLYcZDntCCP+TjityFZeYV31WzTV1MutI qb1fiu0PtTqfOGoT0eBVmBBrFhHsmtgga/vjs7LyF7ZW5FWWKGUlYXVxQl4wenC1 eAIlk1e/CzWI/ybh0QnsZyEd+Li5uhcg0Na12T+6OS9+7o/zWsxtiaB91FG2DVtf 7x7ejv7jmE6IanWKsNTa+Lo0clUNm6ufMDOLIlrPP39kkbkVY/Cqh/9n6in4XezN 8NlrgjOjZHohvLEwtW+Qgo4XAjvfb2QEDOkI9RviNMEoT5ZmWVjLr4srrBcxohqV 6v/UMr3AyDfI3xppIsEs =OWTc -----END PGP SIGNATURE----- --=-lMFwBS4VzHn7ryn66xGn--