| Summary: | m2m.eclipse.org is very slow | ||
|---|---|---|---|
| Product: | Community | Reporter: | Ian Skerrett <ian.skerrett> |
| Component: | vservers | Assignee: | Eclipse Webmaster <webmaster> |
| Status: | RESOLVED FIXED | QA Contact: | |
| Severity: | normal | ||
| Priority: | P3 | CC: | contact, denis.roy, roger |
| Version: | unspecified | ||
| Target Milestone: | --- | ||
| Hardware: | PC | ||
| OS: | Windows 7 | ||
| Whiteboard: | |||
|
Description
Ian Skerrett
Denis if you send me your public key I'd be happy to give you root access to the vserver. There were 998 connections (out of 1000) to incoming port 1883. Is that expected? I've cleared all incoming connections, and the site is responsive now. I can increase the max. connections to the host, but I want to make sure this behaviour is expected. Wow. Maybe we're experiencing some kind of DoS attack even if I think it's unlikely. If this happens again it would be interesting whether the 100s of connections originate from a single IP or several. I have no idea whether a max connections # > 1000 would be a good idea. Roger, maybe you can give us your opinion on this? The connection count is already back up to 350 for port 1883 and it's climbing. You can view connections using netstat -an | grep 1883 FWIW we have already 222 ESTABLISHED connections to the MQTT broker just a few minutes after Denis did his magic. So I guess the free eclipse.org broker is certainly very popular... So do these "things" just connect, stay connected, and not transmit anything? I don't see much bandwidth activity to/from your host. (In reply to Benjamin CABE from comment #5) > FWIW we have already 222 ESTABLISHED connections to the MQTT broker just a > few minutes after Denis did his magic. > So I guess the free eclipse.org broker is certainly very popular... Any idea who or where the connections are coming from? 1000 connections is unusual but not entirely unexpected. We are touting it as a sandbox server to try things out after all. I've had >4000 connections on test.mosquitto.org. In my experience they tend to stick around for a short while then disconnect. You can see graphs of the stats here (I must rename it): https://xively.com/feeds/59871/ "active clients" is the plot of currently connected clients. You can get a view of the last 12 months with: http://api.cosm.com/v2/feeds/59871/datastreams/1.png?b=true&g=true&w=360&h=200&duration=12month From that you can see that 1000 connections or even close are rare. Okay, I've increased max. connections to 10,000. Enjoy I've been looking at the logs (/var/log/mosquitto/*) and in the last day, there have been connections from 2511 unique ip addresses using a client id of the form kong.protector/* and from 1077 unique ip addresses using a client id of the form location.konge/* There is very little real data that looks like it comes from these clients but they do follow the bizarre practice of publishing to a keepalive topic that is implemented in the example android code at http://tokudu.com/post/50024574938/how-to-implement-push-notifications-for-android , so it looks like a phone app. |