LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 09-09-2009, 09:14 AM   #1
uks
Member
 
Registered: Jul 2007
Posts: 68

Rep: Reputation: 16
http maxclients saturate often


Hi

I have set the maxclients to be 150 and the site is used heavily. Of late I see it hitting the upper limit quite often. I checked the server-status with extended monitoring and I could see a log of clients which are listed as ? with the activity "reading"
This accouns to about 130 of the the list and the rest 20 appear to be actually accessing some page.

The erro_log says "server reached MaxClients setting, consider raising the MaxClients setting"
*** attempt to put segment in horiz list twice
*** attempt to put segment in horiz list twice

Nothing that looks untoward in the other access and request logs.

Has someone experienced this kind of a situation ?
Any advice is much appreciated.

Also , how do I specifically see if its an attack ?

Rgds
 
Old 10-01-2009, 06:30 PM   #2
waltuotinen
LQ Newbie
 
Registered: Oct 2009
Location: Clifton, NJ USA
Posts: 6

Rep: Reputation: 2
maxclients hit often

Not sure what to say about the maxclients being hit, but as for seeing if it's an attack, remember to make sure your access log is logging the client IP address; if the same address appears many times in sequence within a short period of time, consider that a possible attack.

Walt
 
Old 10-01-2009, 08:34 PM   #3
chrism01
Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Centos 6.5, Centos 5.10
Posts: 16,261

Rep: Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028
Yeah, check the apache error_log and access_log.
If they look ok, maybe you've got a popular site , in which case raise that number.

If it looks like an attack as described, investigate fail2ban http://linux.die.net/man/8/fail2ban

Last edited by chrism01; 10-01-2009 at 08:36 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
How many more that MaxClients in apache? knobby Linux - Server 1 09-18-2008 07:16 PM
how many MaxClients should i give? zakir_123 Linux - Server 1 06-14-2008 11:17 PM
MaxClients setting lavinya Linux - Server 2 01-04-2008 02:08 PM
Apache MaxClients mphllps Linux - Software 2 03-13-2006 08:46 AM
apache , MaxClients, and Dos abulmagd Linux - Networking 1 02-02-2006 11:08 AM


All times are GMT -5. The time now is 07:25 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration