hg.slitaz.org / cook.slitaz.org vhost under maintenance

shann · 2025-08-02 08:43:18

Hi,

I put hg.slitaz.org / cook.slitaz.org to mitigate suspicious flood.

Infact many requests on cook.slitaz.org to fetch files/receipt/packages and flood requests on hg.slitaz.org

Need to investigate exactly happen, but to ensure forum and tank availability i put on 503 those vhosts.

Sorry for inconvenience.

shann · 2025-08-05 15:04:47

Hi,

Sorry for maintenance, i test locally switch from apache cgi (spawn many python instances for requests) to wsgi mode.

Local tests seem good, i add apache-mod-wsgi and adjust vhost for hg on pangolin.

Need to monitor if CPU load increase but think not, infact load due of many python instances.

Infact when i put vhost hg maintenance and reload apache, load decrease and not came back.

For suspect flood, many windows hosts, we can't directly ban ip ranges, we have already limit rate by requests / requests_ip.

This flood impact host due of huge spawn python for hgwebdir cgi process.

shann · 2025-08-05 16:18:37

I put vhost again on maintenance hmm

Seem using wsgi causing "Out of memory" with apache process, and satured memory.

shann · 2025-08-07 06:23:22

Hi,

After more tests and read docs, threads, see that wsgi process need to be control for limit processes / threads.

I reenable hg vhost, ensure cgi module not loaded only wsgi, and limit threads / processes, now monitor to see that more efficient.

shann · 2025-08-07 17:31:58

Hi,

Since morning, i don't notice any issue with services.

SliTaz Forum