[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] Ahmia search engine works normally again

So all the user agent where just "randomly" generated strings? Cant You But A White list so only allow A certain useragents?

"Nurmi, Juha" <juha.nurmi@xxxxxxxx> skrev: (7 december 2016 16:40:58 CET)
>Ahmia.fi and msydqstlz2kzerdg.onion went offline for a short while.
>flooded the onion site with multiple requests per second: with randomly
>selected user agent strings someone was generating GET
>msydqstlz2kzerdg.onion/address/<somethingherethatischanging> requests.
>Constant flood was similar to this:
>[07/Dec/2016:04:11:04 +0100] "GET /address/... HTTP/1.1" "OS"
>[07/Dec/2016:04:11:04 +0100] "GET /address/... HTTP/1.1" "like"
>[07/Dec/2016:04:11:04 +0100] "GET /address/... HTTP/1.1" "NT"
>As a results, Ahmia tried to load the page /address/ over and over
>and this exhausted CPU of my front-end server.
>How I fixed this:
>1) I separated ahmia.fi and msydqstlz2kzerdg.onion to run
>independently with their own processes
>2) I disabled msydqstlz2kzerdg.onion/address/ completely,
>https://ahmia.fi/address is still available
>3) I adjusted several performance settings and cache
>4) I added one more CPU core to the front-end server
>Ahmia search engine works normally again. Still, I hope that this flood
>tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
>To unsubscribe or change other settings go to

Sincerly flipchan - LayerProx dev
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to