Welcome! Log In Create A New Profile

Advanced

Re: Nginx hang and do not respond with large number of network connection in FIN_WAIT state

Peter Booth via nginx
January 10, 2019 11:08PM
How do you know that this is an attack and not “normal traffic?”
How are these requests different from regular requests?
What do the weblogs say about the “attack requests?"


> On 10 Jan 2019, at 10:30 PM, gnusys <nginx-forum@forum.nginx.org> wrote:
>
> My Current settings are higher except the worker_process
>
> worker_processes 1;
> worker_rlimit_nofile 69152;
> worker_shutdown_timeout 10s;
> thread_pool iopool threads=32 max_queue=65536;
>
>
> I think the issue is that nginx accumulate ESTABLISHED and CLOSE_WAIT and
> FIN_WAIT1
>
> From successive netstat -apn listing I see that it is the CLOSE_WAIT that is
> sky-rocketing first
>
> then eventually ESTABLISHED and FIN_WAIT1
>
>
> The million dollar question is why Apache httpd is handling this situation
> of attack quite well on the same server while having Nginx as a reverse
> proxy hangs the web stack by TCP state exhaustion?
>
> The symptoms are similar to what is mentioned at
> https://blog.cloudflare.com/this-is-strictly-a-violation-of-the-tcp-specification/
>
> Only thing is that I don't know what must be changed in the config etc to
> fix this problem in nginx
>
> Posted at Nginx Forum: https://forum.nginx.org/read.php?2,282613,282645#msg-282645
>
> _______________________________________________
> nginx mailing list
> nginx@nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

Nginx hang and do not respond with large number of network connection in FIN_WAIT state

Anoop Alias January 09, 2019 09:58PM

Re: Nginx hang and do not respond with large number of network connection in FIN_WAIT state

Peter Booth via nginx January 10, 2019 01:04AM

Re: Nginx hang and do not respond with large number of network connection in FIN_WAIT state

Maxim Dounin January 10, 2019 08:46AM

Re: Nginx hang and do not respond with large number of network connection in FIN_WAIT state

Anoop Alias January 10, 2019 01:06PM

Re: Nginx hang and do not respond with large number of network connection in FIN_WAIT state

Anoop Alias January 10, 2019 01:26PM

Re: Nginx hang and do not respond with large number of network connection in FIN_WAIT state

Peter Booth via nginx January 10, 2019 04:34PM

Re: Nginx hang and do not respond with large number of network connection in FIN_WAIT state

gnusys January 10, 2019 02:47PM

Re: Nginx hang and do not respond with large number of network connection in FIN_WAIT state

itpp2012 January 10, 2019 04:29PM

Re: Nginx hang and do not respond with large number of network connection in FIN_WAIT state

gnusys January 10, 2019 10:30PM

Re: Nginx hang and do not respond with large number of network connection in FIN_WAIT state

gnusys January 10, 2019 11:02PM

Re: Nginx hang and do not respond with large number of network connection in FIN_WAIT state

Peter Booth via nginx January 10, 2019 11:08PM

Re: Nginx hang and do not respond with large number of network connection in FIN_WAIT state

gnusys January 10, 2019 11:19PM

Re: Nginx hang and do not respond with large number of network connection in FIN_WAIT state

Peter Booth via nginx January 10, 2019 11:36PM

Re: Nginx hang and do not respond with large number of network connection in FIN_WAIT state

gnusys January 10, 2019 11:32PM

Re: Nginx hang and do not respond with large number of network connection in FIN_WAIT state

Peter Booth via nginx January 10, 2019 11:42PM

Re: Nginx hang and do not respond with large number of network connection in FIN_WAIT state

gnusys January 10, 2019 11:56PM

Re: Nginx hang and do not respond with large number of network connection in FIN_WAIT state

gnusys January 11, 2019 10:30PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 75
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready