We are having some trouble with recurring DDoS/DoS attacks on one of our Resin servers. While being attacked, it seems most of the threads in the thread pool are connected but waiting for request input inside JNI code:
com.caucho.vfs.JniStream.readNative(Native Method) com.caucho.vfs.JniStream.read(JniStream.java:98) com.caucho.vfs.ReadStream.readBuffer(ReadStream.java:922) com.caucho.vfs.ReadStream.waitForRead(ReadStream.java:289) com.caucho.server.port.TcpConnection.run(TcpConnection.java:386) com.caucho.util.ThreadPool.runTasks(ThreadPool.java:507) com.caucho.util.ThreadPool.run(ThreadPool.java:433) java.lang.Thread.run(Thread.java:595) Could setting a lower read-timeout (http://www.caucho.com/resin-3.0/config/tuning.xtp#Timeouts) ease the effect? What would be sensible values? Any other tips for counter measures? Thanks in advance. _______________________________________________ resin-interest mailing list resin-interest@caucho.com http://maillist.caucho.com/mailman/listinfo/resin-interest
