From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on dcvr.yhbt.net X-Spam-Level: X-Spam-ASN: AS33070 50.56.128.0/17 X-Spam-Status: No, score=0.0 required=5.0 tests=FREEMAIL_FROM,T_DKIM_INVALID shortcircuit=no autolearn=unavailable version=3.3.2 X-Original-To: archivist@yhbt.net Delivered-To: archivist@dcvr.yhbt.net Received: from rubyforge.org (50-56-192-79.static.cloud-ips.com [50.56.192.79]) by dcvr.yhbt.net (Postfix) with ESMTP id 838321F6E1 for ; Thu, 29 Nov 2012 20:41:26 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by rubyforge.org (Postfix) with ESMTP id 18A152E081; Thu, 29 Nov 2012 20:41:27 +0000 (UTC) X-Original-To: mongrel-unicorn@rubyforge.org Delivered-To: mongrel-unicorn@rubyforge.org Received: from mail-pa0-f50.google.com (mail-pa0-f50.google.com [209.85.220.50]) by rubyforge.org (Postfix) with ESMTP id E47CC2E07D for ; Thu, 29 Nov 2012 20:30:47 +0000 (UTC) Received: by mail-pa0-f50.google.com with SMTP id hz10so9877686pad.23 for ; Thu, 29 Nov 2012 12:30:46 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:to:subject:date:message-id:in-reply-to:references:mime-version :content-type:content-transfer-encoding:x-mailer; bh=nwG7tfGMvQOH2EgQkunowsCllvIjvCP8DLFt0qHycKk=; b=h8QikyLEM2NLarp/ksI9jdeHp1s6hkfxIqixpfX92BLDIuRSTMurUBqE9gLqr+qMCa gPjllZ+gnDm2CpaTRX4am/MaUAHOi5BfgxUP3cYwlNCtO2EfUrpzVV/ldGyFl7dvntNL zGMNavAwuJMIB+K35xdf/aGyeX5OJBgp2snYwClEVckMjRg9JXfe9ZrainNgY82Ki0wV 9kPRZEN2+a+BmBqMxffkCQdA2/+IVTOi/TzJk1VfUngINXXergJU8XJrbFn0+/BkDrlV IvK66NfJNcp+rmjulnpgtGp7KUNe67qzff1KaC7b+Q7ZHdEhU0E9/ff3FQoaMo/3ZcmL ScmQ== Received: by 10.68.197.197 with SMTP id iw5mr70829024pbc.22.1354221046119; Thu, 29 Nov 2012 12:30:46 -0800 (PST) Received: from [10.0.1.2] (80.84.233.220.static.exetel.com.au. [220.233.84.80]) by mx.google.com with ESMTPS id tm8sm1726185pbc.48.2012.11.29.12.30.44 (version=TLSv1/SSLv3 cipher=OTHER); Thu, 29 Nov 2012 12:30:45 -0800 (PST) From: "Lawrence Pit" To: "unicorn list" Subject: Re: Combating nginx 499 HTTP responses during flash traffic scenario Date: Fri, 30 Nov 2012 07:30:40 +1100 Message-ID: In-Reply-To: References: <20121029184549.GA9690@dcvr.yhbt.net> <20121029215312.GA29353@dcvr.yhbt.net> <20121030213719.GA6701@dcvr.yhbt.net> <20121102193803.GA17916@dcvr.yhbt.net> <20121105114850.GA15932@dcvr.yhbt.net> <20121106212338.GA4018@dcvr.yhbt.net> MIME-Version: 1.0 X-Mailer: MailMate (1.4.2r2819) X-BeenThere: mongrel-unicorn@rubyforge.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: mongrel-unicorn-bounces@rubyforge.org Errors-To: mongrel-unicorn-bounces@rubyforge.org > [2] > http://mid.gmane.org/CAK4qKG32dGgNbzTzCb6NoH5hu_DrHMOFaFhk-6Xvy-T86++ukA@mail.gmail.com > I haven't heard back on results of our nasty/crazy solution, though. fyi: I've been running that patch for a while in our staging environment. As far as I can tell it works. Though we haven't tested it with older browsers such as IE6 (we do not have that requirement) nor with all of the API clients we see (java, python, etc., we do have that requirement). Hopefully we're bringing that patch into our production environment within the next couple of weeks, and then we should see results later that week. Tom Burns wrote: > Unexpectedly the patch also helped us ward off a DoS attack where the > attackers were disconnecting immediately after making a request. Awesome! The only thing that worries me is that Eric calls this a "nasty/crazy solution". :p Not sure why. Seems to me it's a rather smart solution that perhaps in the future would deserve to be the default. A related question: is it possible to get insight in what's in the unicorn queue and for how long requests have been queued there? Cheers, Lawrence _______________________________________________ Unicorn mailing list - mongrel-unicorn@rubyforge.org http://rubyforge.org/mailman/listinfo/mongrel-unicorn Do not quote signatures (like this one) or top post when replying