On Sun, Jul 12, 2009 at 11:54 AM, Mike Bailey<m...@bailey.net.au> wrote:
>
> If one of your apps was slashdotted, how long before you would know

crontab:
mailto=m...@bailey.net.au
* * * * * root /usr/bin/curl -s http://slashdot.org | fgrep 'bailey.net.au'

Okay, ^^^ this is a joke! ;-P

On Mon, Jul 13, 2009 at 12:08 AM, Mike Bailey<m...@bailey.net.au> wrote:
>
> How would you be detect a traffic spike?

There is a crude munin plugin for httpd request rate[1] (uses ruby and
greps mod_status, ergh). By default it polls every 15 minutes, but you
could ratchet this down, I guess.

You could install this plugin and setup munin to email you when
request rate was over 50 and then when over 100, for example:

/etc/munin/munin.conf
contact.me.command mail -s "Hop to it ${var:host} ${var:graph_title}"
m...@bailey.net.au
contact.me.always_send warning critical

[bailey.net.au]
   address 127.0.0.1
   use_node_name yes
   apache_request_rate.requests_per_second.warning 50
   apache_request_rate.requests_per_second.critical 100

Not sure of the overall efficacy of this approach. You might be able
to write your own munin plugin that counts traffic on the firewall or
the number of lines in the access_log - these might be
faster-to-calculate indicators of a slashdotting, not sure.

Regards,

Gus

[1] http://muninexchange.projects.linpro.no/?search&cid=1&pid=447&phid=668

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Ruby 
or Rails Oceania" group.
To post to this group, send email to rails-oceania@googlegroups.com
To unsubscribe from this group, send email to 
rails-oceania+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/rails-oceania?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to