Comments on: Stop http Pipeline from overloading your server, using connlimit iptables http://www.frederico-araujo.com/2009/01/25/stop-http-pipeline-from-overloading-your-server-with-iptables/ Ruby, Rails, OSX and linux sysadmin Thu, 02 Sep 2010 08:03:21 +0000 http://wordpress.org/?v=2.9.2 hourly 1 By: Mark Nottingham http://www.frederico-araujo.com/2009/01/25/stop-http-pipeline-from-overloading-your-server-with-iptables/comment-page-1/#comment-40 Mark Nottingham Wed, 28 Jan 2009 02:41:37 +0000 http://www.frederico-araujo.com/?p=79#comment-40 Allowing pipelining doesn't increase connection usage (although it does have other problems); that's the other connection limit settings. The approach you take above doesn't work for proxies that have a large number of users behind them (e.g., ISPs like AOL) or large networks behind NAT (e.g., corporate networks), because traffic from a number of users will appear to come from one IP address (or a small pool of them). This will cause your site to look like it's down (or more likely, flapping up and down) if more than a handful of people is looking at your site. Yes, people who abuse servers are annoying. Probably the best solution is to move to a server that doesn't consume so many resources per-connection. I might also take it up with mozilla to put some constraints on this setting, so as to make it more responsible. Cheers, Allowing pipelining doesn’t increase connection usage (although it does have other problems); that’s the other connection limit settings.

The approach you take above doesn’t work for proxies that have a large number of users behind them (e.g., ISPs like AOL) or large networks behind NAT (e.g., corporate networks), because traffic from a number of users will appear to come from one IP address (or a small pool of them). This will cause your site to look like it’s down (or more likely, flapping up and down) if more than a handful of people is looking at your site.

Yes, people who abuse servers are annoying. Probably the best solution is to move to a server that doesn’t consume so many resources per-connection. I might also take it up with mozilla to put some constraints on this setting, so as to make it more responsible.

Cheers,

]]>