Re: Increasing amount of spam on the mailing list

2011-07-26 Thread Willy Tarreau
Hi Karl, On Tue, Jul 26, 2011 at 09:25:42AM +1000, Karl Kloppenborg wrote: Hi All Willy, I am seeing an increasing amount of spam / viral infection data coming across the mailing list. I know, there are some periods. Surely, like surely you don't need an entirely open mailinglist, it's

Re: Increasing amount of spam on the mailing list

2011-07-26 Thread Willy Tarreau
On Mon, Jul 25, 2011 at 10:59:15PM -0700, carlo flores wrote: I love the suggestion and offer to administrate the mail list (and I too volunteer), but, ultimately: whatever. SPAM is part of most any list and the more time the guys spend on one of the best pieces of software in the world, the

RE: Increasing amount of spam on the mailing list

2011-07-26 Thread Karl Kloppenborg
That's fair enough, I am more talking about the viruses... I don't particularly mind the advert spam as such, ignore and cover your ears.. Karl Kloppenborg Head of Development Phone: 1300 884 839 (AU Only - Business Hours) Website: AU http://www.crucial.com.au | US http://www.crucialp.com

Re: nbproc1, ksoftirqd and response time - just can't get it

2011-07-26 Thread Dmitriy Samsonov
Hi! 2011/7/26 Willy Tarreau w...@1wt.eu There is an option in Del''s servers to install Intel's 10Gbit NIC - it is working a way faster (x3, x5) then broadcom. Intel's 10G NICs are fast, but generally hard to tune, you have a hard trade-off between data rate and latency. Basically you

Re : force-persist

2011-07-26 Thread Mouny Jean michel
Hello Willy, I have worked about this issue and find out some interesting things about what was going on. You put me on the right way, thanks for that. In fact, my application is sending HTTP requests to many web servers (at  least 6). Since the same cookie name was used in HAPROXY  for all

Re: Increasing amount of spam on the mailing list

2011-07-26 Thread Julien Vehent
On Tue, 26 Jul 2011 08:12:56 +0200, Willy Tarreau wrote: On Mon, Jul 25, 2011 at 10:59:15PM -0700, carlo flores wrote: I love the suggestion and offer to administrate the mail list (and I too volunteer), but, ultimately: whatever. SPAM is part of most any list and the more time the guys spend

Re: nbproc1, ksoftirqd and response time - just can't get it

2011-07-26 Thread Craig
Hi, We've tested from the outside. In fact that was a real attack. Botnet consisted of ~10-12k bots each opening 1000 connections/second. This kind of DDoS seems popular lately. Did it originate from a specific AS, did you try to nullroute? I'm curious because mostly when I see botnet attacks,

Re: nbproc1, ksoftirqd and response time - just can't get it

2011-07-26 Thread Dmitriy Samsonov
No, this DDoS was from different IPs in 40-50 countries, so it was performed by zombies. As far as I can tell it was performed with Agressor2.0 botnet, successor of DirtyJump3.0. This botnet is constructed to let even 3 y.o. attacker to make serious imact. Each bot not only performs 'http-flood',

Re: nbproc1, ksoftirqd and response time - just can't get it

2011-07-26 Thread Willy Tarreau
Hi Dmitriy, On Tue, Jul 26, 2011 at 05:27:10PM +0400, Dmitriy Samsonov wrote: Intel's 10G NICs are fast, but generally hard to tune, you have a hard trade-off between data rate and latency. Basically you tune them for large or small packets but not both. Still for DDoS they might be well

Re: Re : force-persist

2011-07-26 Thread Willy Tarreau
Hello Jean-Michel, On Tue, Jul 26, 2011 at 06:11:28PM +0100, Mouny Jean michel wrote: Hello Willy, I have worked about this issue and find out some interesting things about what was going on. You put me on the right way, thanks for that. In fact, my application is sending HTTP requests to