Help - Search - Members - Calendar
Full Version: boot-land server
The CD Forum > The CD Forum > WinBuilder
Pages: 1, 2
psc
Something wrong with boot-land.net?
I can't connect all the day.

Peter
H7SE
Me too
psc
QUOTE (H7SE @ Aug 18 2007, 08:28 PM) *
Me too


Then there really seems to be something wrong, and it is not my network.

Peter
TheHive
No its not your network. Its been down since part of yesterday August 17, 2007.
thuun
ermm.gif

Hopefully all is well soon. smile.gif
...

Let's wish the boot-land server a speedy recovery.
stretcher.gif
Nuno Brito
Been away sorry.. Will email the hosting company right now! smile.gif
thuun
QUOTE
QUOTE
When you get back up and running, I think you should post a kind request to all users to feel free to scan their system for agents that might be used for ddos.

http://ftp.cerias.purdue.edu/pub/tools/uni...tils/find_ddos/

http://www.nessus.org/


Would you please post this same info here on the 911cd.net?

These DDoS are really nasty.. smile.gif


wink.gif
psc
Maybe this post helps hard working admins, maybe they know already:

Some minutes ago I could connect to boot-land.net and found a two hours old post of medevil about 'welcome back'.

But the server still reacts randomly not successful. Sometimes I get a page, sometimes not.

Peter
Nuno Brito
I've received a resumed log from the support people - it seems to be overall lack of memory because too many requests are running at the same time on boot-land.net here's a snippet:

QUOTE
Actually the problem is you are constantly running out of memory. I
actually had to restart the Private Server just to log in because ssh
didn't have enough memory to fork. The instant I logged in I saw that
the memory and swap was almost entirely full. It's so much that it can't
spawn another apache. Your main page boot-land.net may actually have
some incorrect rewrites or some such actually causing the internal server
error on the main page, but I can't debug them because I can't save a
file without free memory.


nuno:~# free

total used free shared buffers cached

Mem: 263168 263168 0 0 0 0

-/+ buffers/cache: 263168 0

Swap: 263168 210488 52680


Most of the reason you are running out of memory so quickly is because
hundreds of people are downloading a file off of one of your sub-domains.
It's listed below. When I bring up the apache process I see about 20
requests/second of this file. If you have any more questions about this,
(or you'd like me to remove this file), please let me know!


www.vistape.boot-land.net GET /files/vistape008up2-base.rar



Flooding the site with too many simultaneous requests renders it offline, I've read the memory usage and it jumped from regular 150Mb of used RAM (we had 360Mb available) to an average 1Gb worth of simultaneous conections for this file - so I think a solution might be disabling direct links on this specific file so it can only be downloaded from the vistape site and avoid this DDoS attack.

Anyone with PHP/HTML knowledge to help us solve this menace?

A good example of this behavior can be noticed on the driverpacks webpage - it will only allow to download from the site page and if the referer is not from driverpacks it will abort.

Look here: http://driverpacks.net/DriverPacks/download.php?pag=m

All help on this case is surely welcome! smile.gif
Ed_P
Short term solution, rename the file. Also prevent search engines from accessing it.
Daemonforce
QUOTE (Ed_P @ Aug 20 2007, 05:46 PM) *
prevent search engines from accessing it.

Y hello thar robots.txt buddy! wink.gif
psc
Same issue again?

Peter
Daemonforce
Easy come....Easy go. wink.gif
_smiley_
Again, the server sometimes doesn't respond.
This must be the third attack

Nuno: Can you ask your host if that happen because of many downloads? Perhaps we should let download only for registered members...
Daemonforce
QUOTE (_smiley_ @ Aug 22 2007, 02:06 AM) *
Perhaps we should let download only for registered members...

That's what I did for my site. ASP.NET, baby! Lockdowns everywhere! huh.gif
paraglider
Another more radical solution to spread the load and cost would be to only allow hosting of the base winbuilder packages. The other packages like VistaPE should be hosted by the creator of the package on their own web servers.
Daemonforce
QUOTE (paraglider @ Aug 22 2007, 04:53 AM) *
Another more radical solution to spread the load and cost would be to only allow hosting of the base winbuilder packages. The other packages like VistaPE should be hosted by the creator of the package on their own web servers.

Are you telling me that Nuno was acting as a major site mirror? blink.gif hmm.gif
_smiley_
QUOTE (Daemonforce @ Aug 22 2007, 04:23 PM) *
QUOTE (paraglider @ Aug 22 2007, 04:53 AM) *
Another more radical solution to spread the load and cost would be to only allow hosting of the base winbuilder packages. The other packages like VistaPE should be hosted by the creator of the package on their own web servers.

Are you telling me that Nuno was acting as a major site mirror? blink.gif hmm.gif


Nuno hosts all boot-land.net domains
Daemonforce
QUOTE (_smiley_ @ Aug 22 2007, 06:27 AM) *
Nuno hosts all boot-land.net domains

Duh! o_O

But was he attempting to be a host for all sorts of programs and plugins? The bandwidth costs alone would shut him down.
thuun
QUOTE
Another more radical solution to spread the load and cost would be to only allow hosting of the base winbuilder packages. The other packages like VistaPE should be hosted by the creator of the package on their own web servers.


I began to think about this last week as I am hosting two servers for wb now.
Currently, the main boot-land server is producing errors on all forum requests, but projects are online.

Let me tell you a short story..

One day, a year or so ago, I go to check my email. Nuno, who I recognized from the forum here, had sent me a message explaining that he really liked some of the stuff I had provided on a small freewebs site for pe/system builders I had made. That alone made me feel very good, I knew Nuno to be quite sharp in his presentation of ideas and solutions here.
Then he goes on to tell me he would be happy to host the site, this was back when boot-land had a little more bandwidth to spare.
I knew this was something I shouldn't pass on, so I contacted him about the details. After a short time at boot-land.net, I decided to examine the proprietary winbuilder .script format. It was easy enough to manipulate with a little practice. As I began creating scripts for the OS and apps., more server space was allocated. I'm mentioning this because I know I am one of many users that Nuno has contacted, and ultimately provided server space to. Sometimes it boggles the mind.. Let me take this chance to say Thank you Nuno.
Furthermore though, I mention this because people should understand that some project providers may or may not have the resources, financial or otherwise, to host their projects for widespread use. One the other hand, There's no doubt it's time to actively seek a solution to help boot-lands main server with some of it's load. Users that wish to assist with any such efforts may certainly PM me with ideas. I encourage other project providers to ultimately take paragliders suggestion. smile.gif
Ed_P
If VistaPE is the file causing the most problems couldn't it be moved to a site like RapidShare? It would still be available but not impacting boot-land's bandwidth. If it's active it can stay there indefinitely. Should it's activity drop in a few months it could be put back on boot-land.
_smiley_
QUOTE (Ed_P @ Aug 22 2007, 08:00 PM) *
If VistaPE is the file causing the most problems couldn't it be moved to a site like RapidShare? It would still be available but not impacting boot-land's bandwidth. If it's active it can stay there indefinitely. Should it's activity drop in a few months it could be put back on boot-land.


I don't think that the problem is for only one file. Someone attacked boot-land.net server and maybe he will do it again by chosing a different file. Just open winbuilder and see how many files are available to download.
Ed_P
QUOTE (_smiley_ @ Aug 22 2007, 01:19 PM) *
I don't think that the problem is for only one file. Someone attacked boot-land.net server and maybe he will do it again by chosing a different file.

Maybe. If it's deliberate, probably. But if it's someone's looping script not necessarily. Moving or renaming the file is a simple and quick fix to verify the intent.

QUOTE (_smiley_ @ Aug 22 2007, 01:19 PM) *
Just open winbuilder

You got a direct link to that? I'm having problems.
Nuno Brito
Hi,

It's not a bandwith issue since we do have good conditions - the only problem that is impacting on boot-land.net is that too many (supposed) people are downloading a single file from a server and this jams everyone else trying to enter the site.

We had a similar event a month or two ago when the SQL database from the boot land forum showed literally thousands of people trying to enter the site which jammed the forum with error 500 messages.

Eventually we figured it was a huge ammount of bots trying to register themselves on the registration page, so disabling the queries which we're executed was enough to overcome this excess of traffic until they got tired of trying - still it took almost 9 days to fade away this annoyance.

http://www.boot-land.net/forums/Improving-...ance-t2493.html

Now we have a slimmed SQL database, optimized to support this sort of abuse - but there isn't much to do since they can very well pick any other file from any other boot-land.net subdomain, not just from vistape.

boot-land.net is now hosted on a private virtual server and memory was also increased to even bigger ram load - let's hope this is enough for the time being.

I'm still on vacations and can't stay much time online, please let me know if the forums get offline ever again.

Thank you! smile.gif
Daemonforce
Good to hear this. Do you want bots crawling your site at all? You can always just ban them. I usually run a robots.txt on my webroot every once in a while when I get more than 8 bots crawling me. It's annoying on a dialup connection and there are more of them when I'm on cable.
paraglider
The approach taken by rapidshare and others is a good idea - only allow a download when a random strings of characters has been entered. The string is presented encoded in a graphic so that its hard for automatic downloading programs to detect the string.
psc
Got a new problem at 9:00 pm MEZ

Read a post, but storing the reply timed out.

Peter
Nuno Brito
Hmm.. some time passed since last offline intervals - guess things have returned to normal! closedeyes.gif
Ed_P
What did you do to fix the problem(s)?
Nuno Brito
Not much, this (huge) bandwidth increase just faded away and we're back to full speed.. smile.gif
_smiley_
Right now I am getting an Internal Server Error
Ed_P
FWIW I just clicked the 1st posting's link and got in no problem.
psc
Again since about 30 minutes.

Have a nice weekend w/o WB thoughts!

Peter laugh.gif

BTW @smiley: Your avatar seems to be stored on boot-land.net.

Your post 2 numbers above is waiting for boot-land.net ...
thuun
Here we go again...
( ouch. )
sad.gif

Hope things are resolved soon, last night and this morning I was unable to connect to upload a new trueimage 'lite' script.
..
psc
QUOTE (psc @ Aug 18 2007, 08:17 PM) *
Something wrong with boot-land.net?
I can't connect all the day.

Peter


Same again right now!

Peter
Nuno Brito
The problem is mySQL memory consumption going at >600Mb of RAM and the hosting provider demands a substancial increase on the monthly costs to support it.


All boot-land.net sites based on mySQL are currently jammed or work only when memory use decreases. thumbdown.gif

Those who don't require mySQL databases are completely operational - http://boot-land.net/winbuilder for example, this should also include all wb download servers.

Anyone knows good host providers that can support this level of mySQL demand at affordable rates?

Will also start optimizing the forums board to use as less ram as possible. ermm.gif
psc
Maybe there is a different reason.

When I now had success to enter boot-land.net, there have heen only 26 users!

Inspite of that, clicking 'new posts' gave me the well known 'internal server error'

I think, because there are so few users, the reason cannot be an extreme high (memory) usage of mySQL server!
(Or inside the mySQL scripts there is a bug which uses much too much of memory and does not free it when finished)

Peter
Nuno Brito
Memory on the virtual server was decreased from 650Mb to 128Mb - if an average of 100 users demand around 600Mb then there is surely a lot of things that need to improved to make memory more efficient.

We have very good bandwidth conditions but mySQL is a real bugger.. dry.gif


Anyone around here has some experience on optimizing databases or know any good tips to read?
psc
QUOTE (Nuno Brito @ Nov 19 2007, 03:58 PM) *
Memory on the virtual server was decreased from 650Mb to 128Mb - if an average of 100 users demand around 600Mb then there is surely a lot of things that need to improved to make memory more efficient.

We have very good bandwidth conditions but mySQL is a real bugger.. dry.gif


Anyone around here has some experience on optimizing databases or know any good tips to read?


Try temporarely to switch off the option 'last click'.
Important: Not in 'show', but in 'store'!

Peter
psc
Currently I tried to connect, and after a lot of trials I (randomly?) got the server.

There have been 7 guests and 1 member (me).
(means that since a long time nearly nobody was able to connect!)

A click of 'Refresh' again brought the 'server unavailable'

That cannot be a question of mySQL using too much memory!
It yes, there is really something wrong with the mySQL queries!

Peter
Nuno Brito
Got news from the hosting staff after asking to move from VPS to shared host:
QUOTE
The graphs indicated that there are times where you are consuming over
800MB RAM. That's about a 20% of the resources on a shared machine. We
cannot move you until you reduce your resource consumption. Dont
worry, we will do our best to try to figure out what's guzzling
resources.

I suggest that you closely monitor your logs. You can connect to you
directory via ssh and run the following command to see how many times an
IP has made a connection to your site. Any IP making over 300
connections, its safe to say they're up to no good. I highly recommend
that you block them. Again, once your resource consumption has decreased,
we will gladly move you to shared hosting.


access.log| awk '{print $1}' | sort | uniq -c |sort -n




1074 77.248.71.99
1091 217.26.89.3
1091 90.13.60.163
1154 91.5.178.157
1260 78.62.81.237
1506 172.189.202.112
1577 124.150.113.118
1615 212.183.222.50
1704 70.135.108.241
2367 87.187.44.128
2836 82.138.52.182
4228 89.15.80.132
5727 66.249.73.188
6934 72.190.121.20
12363 66.249.70.108


Not fun being cutted off because of too much RAM use and no luck connecting throught ssh since it was all disabled and all sites were disconnected.

I've added a robots.txt file cutting off any access to any crawler from google, msn and yahoo.

Let's see how this works.
jaclaz
Nuno,
you accidentally double posted, I deleted second one.

Some info:
IP address: 66.249.70.108
Host name: crawl-66-249-70-108.googlebot.com
66.249.70.108 is from United States(US) in region North America

IP address: 66.249.73.188
Host name: crawl-66-249-73-188.googlebot.com
66.249.73.188 is from United States(US) in region North America

IP address: 72.190.121.20
Host name: cpe-72-190-121-20.tx.res.rr.com
72.190.121.20 is from United States(US) in region North America

More:
IP address: 89.15.80.132
Host name: ulmg-590f5084.pool.einsundeins.de
89.15.80.132 is from Germany(DE) in region Europe


IP address: 82.138.52.182
No host name is associated with this IP address or no reverse lookup is configured.
Error:Host not found
82.138.52.182 is from Russian Federation(RU) in region Europe

IP address: 87.187.44.128
Host name: p57bb2c80.dip0.t-ipconnect.de
87.187.44.128 is from Germany(DE) in region Europe

IP address: 70.135.108.241
No host name is associated with this IP address or no reverse lookup is configured.
Error:Host not found
70.135.108.241 is from United States(US) in region North America

IP address: 212.183.222.50
Host name: 212.183.222.50.dyn.user.ono.com
212.183.222.50 is from Spain(ES) in region Europe

IP address: 124.150.113.118
Host name: dsl-124-150-113-118.vic.westnet.com.au
124.150.113.118 is from Australia(AU) in region Oceana

IP address: 172.189.202.112
Host name: acbdca70.ipt.aol.com
172.189.202.112 is from United States(US) in region North America

IP address: 78.62.81.237
Host name: 78-62-81-237.ip.zebra.lt
78.62.81.237 is from Lithuania(LT) in region Europe

IP address: 91.5.178.157
Host name: p5b05b29d.dip.t-dialin.net
91.5.178.157 is from Germany(DE) in region Europe

IP address: 90.13.60.163
Host name: adijon-258-1-77-163.w90-13.abo.wanadoo.fr
90.13.60.163 is from France(FR) in region Europe

IP address: 217.26.89.3
No host name is associated with this IP address or no reverse lookup is configured.
Error:Timed out
217.26.89.3 is from Italy(IT) in region Europe

IP address: 77.248.71.99
Host name: dhcp-077-248-071-099.chello.nl
77.248.71.99 is from Netherlands(NL) in region Europe

jaclaz
TheHive
So bootland is down since of yesterday
11/19/2007
...Tim...
Just in case it may be of any help...

After numerous tries resulting in the well known "Error 500" I got the following message:

CODE
Fatal error: Out of memory (allocated 3932160) (tried to allocate 311296 bytes) in /home/.fluke/nuno_brito/boot-land.net/mkportal/include/IPB/ipb_board_functions.php on line 831


Tim
paraglider
Its a general problem with server database engines - they all like to use all of the available memory. Both Oracle and SQL server exhibit this type of behaviour. They make the assumption that you have a server dedicated to running your database.

Its usual for databases to have parameters that limit the amount of memory they consume. However the result of this memory throttling can be that your queries start getting out of memory errors so you don't gain much.

Tuning your SQL queries so that they use indexes or adding additional indexes can reduce the memory requirements of the database. If a query results in a full table scan then this consumes much more memory than an index scan.
Nuno Brito
Jaclaz, thank you for tracking the IP's.

Paraglider, I'm tring to found some documentation that explains how to improve the caching to avoid often repeated queries

At the moment I'm placing obrigatory login/password to enter on mySQL based directories:

http://boot-land.net
http://boot-land.net/forums
http://boot-land.net/wiki
http://blog.boot-land.net

Username: boot
Password: boot

This should work as a temporary way to keep crawlers away from the site and start decreasing memory usage drastically.

The host provider also agreed to give 256Mb of available RAM (previously was 150) which is burstable to 512Mb on memory peaks - hope it gives enough room to start debugging and improving the parts where memory is being eaten.

What is strange is how almost nobody is acessing any of the sites and the memory use is still around 230Mb.

Hope to bring better news soon. smile.gif
jaclaz
Nuno, I may be completely wrong, mind you, but maybe the problem relies in the "interconnectedness of all things".

On my ("by design" slow) connection, the http://www.boot-land.net homepage has always been VERY, VERY slow, I believe because it tries to dynamically load from the wiki, last posts, and what not.

Right now I am having the (in)famous 500 error, but when I tried to login half an hour ago I succeeded only after entering (OPERA with no Wand/no remember passwors) login/pass "boot" a NUMBER of times, probably because at each step authentication was re-required for the other linked servers. unsure.gif

jaclaz
Oleg_II
I may be wrong but maybe it's better to make the feature of direct connection to website every time running WinBuilder not automatic but on demand?
Nuno Brito
This was added for debugging where the memory is being used and keep away non-human visitors - it will be removed soon.

Sorry.. rolleyes.gif
Nuno Brito
Everything seems to be back to normal - anyone experiencing error 500 pages while entering the site?

Will keep looking for a better solution to use mySQL.

smile.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.