The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Ddos?

Discussion in 'General Discussion' started by Tagor, Jan 25, 2006.

  1. Tagor

    Tagor Well-Known Member

    Joined:
    Mar 6, 2004
    Messages:
    193
    Likes Received:
    0
    Trophy Points:
    16
    I've got a lot of HTTPD processes running:
    They are from various ip's:
    my.server:http->94.Red-88-6-176.staticIP.rima-tde.net:3449 (ESTABLISHED)

    Is there a way to stop this? Or is there a way to find out for what website this DDOS attack is?
     
  2. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    Are you sue they're not genuine accesses to the server? You're better off looking at the Apache Status page within WHM.
     
  3. Tagor

    Tagor Well-Known Member

    Joined:
    Mar 6, 2004
    Messages:
    193
    Likes Received:
    0
    Trophy Points:
    16
    Strange, you are right. They are normal accesses. Can you tell me then why the load is so high? I didn't have that problem on a older 32 bit CPU.
     
  4. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    Difficult to say. You may need to look into apache tuning in httpd.conf which can often bring down httpd loads to more manageable levels. In particular you could turn off KeepAlives.
     
  5. Tagor

    Tagor Well-Known Member

    Joined:
    Mar 6, 2004
    Messages:
    193
    Likes Received:
    0
    Trophy Points:
    16
    I read KeepAlives will cause slow speeds, is that correct?
     
  6. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    Not necessarily. It's a trade off between server performance and perceived performance. If you're finding that server performance is being degraded because of high web usage, then switching off keepalives can help bring the server performance under control to the level where it provides a perceived perfmance gain to the end user. If, however, there are no performance problems on the server, then there's no point in disabling keepalives as then it would give a perceived performance hit.
     

Share This Page