ÉÎÔÅÒÅÓÎÏÓÔØ.<div><br></div><div>ÎÅ ÐÁÛÅÔ http, ×ÅÒÎÅÅ ÐÏ ÆÁÅÒÂÁÇÕ ÐÏÌÕÞÁÀ 200 (Location = / - ËÏÎÅÞÎÏ ÕÂÒÁÌ, ÕÂÉÌ, ×ÓÅ ÐÅÒÅÚÁÐÕÓÔÉÌ)</div><div>https ÒÁÂÏÔÁÅÔ ÐÒÅËÒÁÓÎÏ.</div><div><br></div><div>=\<br><br><div class="gmail_quote">
9 ÄÅËÁÂÒÑ 2010šÇ. 1:19 ÐÏÌØÚÏ×ÁÔÅÌØ -=HaRius=- <span dir="ltr"><<a href="mailto:rh@nobrend.ru">rh@nobrend.ru</a>></span> ÎÁÐÉÓÁÌ:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div># vmstat -z</div><div>ITEM š š š š š š š š š š SIZE š š LIMIT š š šUSED š š šFREE šREQUESTS šFAILURES</div><div><br></div><div>UMA Kegs: š š š š š š š š 208, š š š š0, š š š 96, š š š š6, š š š 96, š š š š0</div><div>
UMA Zones: š š š š š š š š704, š š š š0, š š š 96, š š š š4, š š š 96, š š š š0</div><div>UMA Slabs: š š š š š š š š568, š š š š0, š š18921, š š š š7, š š20091, š š š š0</div><div>UMA RCntSlabs: š š š š š š568, š š š š0, š š16896, š š š š2, š š16896, š š š š0</div>
<div>UMA Hash: š š š š š š š š 256, š š š š0, š š š š0, š š š 15, š š š š3, š š š š0</div><div>16 Bucket: š š š š š š š š152, š š š š0, š š š165, š š š 10, š š š172, š š š š0</div><div>32 Bucket: š š š š š š š š280, š š š š0, š š š298, š š š 10, š š š299, š š š š0</div>
<div>64 Bucket: š š š š š š š š536, š š š š0, š š š406, š š š š0, š š š425, š š š270</div><div>128 Bucket: š š š š š š š1048, š š š š0, š š 3293, š š š š7, 31842996, š š š 25</div><div>VM OBJECT: š š š š š š š š216, š š š š0, š š 5805, š š 1251, š 290347, š š š š0</div>
<div>MAP: š š š š š š š š š š š232, š š š š0, š š š š7, š š š 25, š š š š7, š š š š0</div><div>KMAP ENTRY: š š š š š š š 120, š 413013, š š š 56, š š š719, š š 9240, š š š š0</div><div>MAP ENTRY: š š š š š š š š120, š š š š0, š š 1850, š š 2025, š 955226, š š š š0</div>
<div>DP fakepg: š š š š š š š š120, š š š š0, š š š š0, š š š š0, š š š š0, š š š š0</div><div>SG fakepg: š š š š š š š š120, š š š š0, š š š š0, š š š š0, š š š š0, š š š š0</div><div>mt_zone: š š š š š š š š 2056, š š š š0, š š š207, š š š š8, š š š207, š š š š0</div>
<div>16: š š š š š š š š š š š š16, š š š š0, š š 2754, š š 1782, š4089333, š š š š0</div><div>32: š š š š š š š š š š š š32, š š š š0, š š 3706, š š 2253, š š28850, š š š š0</div><div>64: š š š š š š š š š š š š64, š š š š0, š š 5531, š š 2701, š 201069, š š š š0</div>
<div>128: š š š š š š š š š š š128, š š š š0, š š 7298, š š 2011, š š62918, š š š š0</div><div>256: š š š š š š š š š š š256, š š š š0, š š 2165, š š 1285, š š59492, š š š š0</div><div>512: š š š š š š š š š š š512, š š š š0, š š 1006, š š š863, š š28438, š š š š0</div>
<div>1024: š š š š š š š š š š1024, š š š š0, š š š 84, š š š556, š š19245, š š š š0</div><div>2048: š š š š š š š š š š2048, š š š š0, š š š 75, š š š323, š š 1494, š š š š0</div><div>4096: š š š š š š š š š š4096, š š š š0, š š š340, š š š678, š š16753, š š š š0</div>
<div>Files: š š š š š š š š š š 80, š š š š0, š š21987, š š56133, š4872774, š š š š0</div><div>TURNSTILE: š š š š š š š š136, š š š š0, š š š737, š š š163, š š š737, š š š š0</div><div>umtx pi: š š š š š š š š š 96, š š š š0, š š š š0, š š š š0, š š š š0, š š š š0</div>
<div>MAC labels: š š š š š š š š40, š š š š0, š š š š0, š š š š0, š š š š0, š š š š0</div><div>PROC: š š š š š š š š š š1120, š š š š0, š š š 70, š š š410, š š12414, š š š š0</div><div>THREAD: š š š š š š š š š 912, š š š š0, š š š573, š š š163, š š š581, š š š š0</div>
<div>SLEEPQUEUE: š š š š š š š š64, š š š š0, š š š737, š š š607, š š š737, š š š š0</div><div>VMSPACE: š š š š š š š š š392, š š š š0, š š š 51, š š š529, š š12395, š š š š0</div><div>cpuset: š š š š š š š š š š72, š š š š0, š š š š2, š š š 98, š š š š2, š š š š0</div>
<div>audit_record: š š š š š š 952, š š š š0, š š š š0, š š š š0, š š š š0, š š š š0</div><div>mbuf_packet: š š š š š š š256, š š š š0, š š š š0, š š 1408, š š 8528, š š š š0</div><div>mbuf: š š š š š š š š š š 256, š š š š0, š š 1150, š š33022, 140995574, š š š š0</div>
<div>mbuf_cluster: š š š š š š2048, š 262144, š š 2003, š š31789, 107340535, š š10380</div><div>mbuf_jumbo_page: š š š š 4096, š š16896, š š š š0, š š š š0, š š š š0, š š š š0</div><div>mbuf_jumbo_9k: š š š š š 9216, š š 8448, š š š š0, š š š š0, š š š š0, š š š š0</div>
<div>mbuf_jumbo_16k: š š š š 16384, š š 4224, š š š š0, š š š š0, š š š š0, š š š š0</div><div>mbuf_ext_refcnt: š š š š š š4, š š š š0, š š š 42, š š 2142, š 132034, š š š š0</div><div>ttyinq: š š š š š š š š š 160, š š š š0, š š š165, š š š171, š š š600, š š š š0</div>
<div>ttyoutq: š š š š š š š š š256, š š š š0, š š š 88, š š š122, š š š320, š š š š0</div><div>g_bio: š š š š š š š š š š232, š š š š0, š š š š0, š š š976, š 128888, š š š š0</div><div>ata_request: š š š š š š š312, š š š š0, š š š š0, š š š912, š š32536, š š š š0</div>
<div>ata_composite: š š š š š š336, š š š š0, š š š š0, š š š š0, š š š š0, š š š š0</div><div>VNODE: š š š š š š š š š š472, š š š š0, š š 4458, š š š806, š š 4770, š š š š0</div><div>VNODEPOLL: š š š š š š š š112, š š š š0, š š š š2, š š š 97, š š š š2, š š š š0</div>
<div>S VFS Cache: š š š š š š š108, š š š š0, š š 4658, š š š589, š 119262, š š š š0</div><div>L VFS Cache: š š š š š š š328, š š š š0, š š š š0, š š š 48, š š š š6, š š š š0</div><div>NAMEI: š š š š š š š š š 1024, š š š š0, š š š š0, š š š288, š1887311, š š š š0</div>
<div>DIRHASH: š š š š š š š š 1024, š š š š0, š š 1116, š š š128, š š 1116, š š š š0</div><div>NFSMOUNT: š š š š š š š š 608, š š š š0, š š š š0, š š š š0, š š š š0, š š š š0</div><div>NFSNODE: š š š š š š š š š648, š š š š0, š š š š0, š š š š0, š š š š0, š š š š0</div>
<div>pipe: š š š š š š š š š š 728, š š š š0, š š š š6, š š š354, š š 8010, š š š š0</div><div>ksiginfo: š š š š š š š š 112, š š š š0, š š š470, š š š586, š š š470, š š š š0</div><div>itimer: š š š š š š š š š 344, š š š š0, š š š š0, š š š š0, š š š š0, š š š š0</div>
<div>KNOTE: š š š š š š š š š š120, š š š š0, š š20377, š š56348, 13244547, š š š š0</div><div>socket: š š š š š š š š š 680, š 102402, š š29980, š š71828, 29414249, š š š š0</div><div>unpcb: š š š š š š š š š š240, š 102400, š š š 47, š š š321, š š š552, š š š š0</div>
<div>ipq: š š š š š š š š š š š 56, š š 8253, š š š š0, š š š š0, š š š š0, š š š š0</div><div>udp_inpcb: š š š š š š š š336, š 102410, š š š š2, š š š328, š š 2212, š š š š0</div><div>udpcb: š š š š š š š š š š 16, š 102480, š š š š2, š š 1846, š š 2212, š š š š0</div>
<div>tcp_inpcb: š š š š š š š š336, š 102410, š š49130, š š53280, š4021759, 25388188</div><div>tcpcb: š š š š š š š š š š880, š 102400, š š29931, š š71825, š4021759, š š š š0</div><div>tcptw: š š š š š š š š š š 72, š š20500, š š19199, š š 1301, š 267339, š3289061</div>
<div>syncache: š š š š š š š š 144, š 102414, š š 1613, š š18927, 18078696, š š š š0</div><div>hostcache: š š š š š š š š136, š š15372, š š 1117, š š š479, š š 1117, š š š š0</div><div>tcpreass: š š š š š š š š š40, š š16464, š š š 53, š š š787, š š 4682, š š š š0</div>
<div>sackhole: š š š š š š š š š32, š š š š0, š š š š0, š š 1818, š š 9095, š š š š0</div><div>ripcb: š š š š š š š š š š336, š 102410, š š š š0, š š š220, š š 1537, š š š š0</div><div>rtentry: š š š š š š š š š200, š š š š0, š š š š6, š š š 51, š š š š6, š š š š0</div>
<div>pfsrctrpl: š š š š š š š š152, š š š š0, š š š š0, š š š š0, š š š š0, š š š š0</div><div>pfrulepl: š š š š š š š š 912, š š š š0, š š š š0, š š š š0, š š š š0, š š š š0</div><div>pfstatepl: š š š š š š š š392, š š10000, š š š š0, š š š š0, š š š š0, š š š š0</div>
<div>pfaltqpl: š š š š š š š š 240, š š š š0, š š š š0, š š š š0, š š š š0, š š š š0</div><div>pfpooladdrpl: š š š š š š š88, š š š š0, š š š š0, š š š š0, š š š š0, š š š š0</div><div>pfrktable: š š š š š š š 1296, š š š š0, š š š š0, š š š š0, š š š š0, š š š š0</div>
<div>pfrkentry: š š š š š š š š216, š š š š0, š š š š0, š š š š0, š š š š0, š š š š0</div><div>pfrkentry2: š š š š š š š 216, š š š š0, š š š š0, š š š š0, š š š š0, š š š š0</div><div>pffrent: š š š š š š š š š 32, š š 5050, š š š š0, š š š š0, š š š š0, š š š š0</div>
<div>pffrag: š š š š š š š š š š80, š š š š0, š š š š0, š š š š0, š š š š0, š š š š0</div><div>pffrcache: š š š š š š š š 80, š š10035, š š š š0, š š š š0, š š š š0, š š š š0</div><div>pffrcent: š š š š š š š š š24, š š50022, š š š š0, š š š š0, š š š š0, š š š š0</div>
<div>pfstatescrub: š š š š š š š40, š š š š0, š š š š0, š š š š0, š š š š0, š š š š0</div><div>pfiaddrpl: š š š š š š š š120, š š š š0, š š š š0, š š š š0, š š š š0, š š š š0</div><div>pfospfen: š š š š š š š š 112, š š š š0, š š š š0, š š š š0, š š š š0, š š š š0</div>
<div>pfosfp: š š š š š š š š š š40, š š š š0, š š š š0, š š š š0, š š š š0, š š š š0</div><div>IPFW dynamic rule: š š š š120, š š š š0, š š š š0, š š š š0, š š š š0, š š š š0</div><div>selfd: š š š š š š š š š š 56, š š š š0, š š š236, š š 1024, š š54606, š š š š0</div>
<div>ip4flow: š š š š š š š š š 56, š š 4158, š š 3642, š š š516, š 120462, š3152043</div><div>ip6flow: š š š š š š š š š 80, š š 4140, š š š š0, š š š š0, š š š š0, š š š š0</div><div>SWAPMETA: š š š š š š š š 288, š 116519, š š š š0, š š š š0, š š š š0, š š š š0</div>
<div>Mountpoints: š š š š š š š752, š š š š0, š š š š7, š š š 23, š š š š7, š š š š0</div><div>FFS inode: š š š š š š š š168, š š š š0, š š 4405, š š š611, š š 4713, š š š š0</div><div>FFS1 dinode: š š š š š š š128, š š š š0, š š š š0, š š š š0, š š š š0, š š š š0</div>
<div>FFS2 dinode: š š š š š š š256, š š š š0, š š 4405, š š š515, š š 4711, š š š š0</div><div><br></div><div><div># sysctl hw.intr_storm_threshold</div><div>hw.intr_storm_threshold: 4000</div></div><div><br></div><div>ÓÅÔÅ×ÕÈÁ igb ÎÁ šËÁËÏÊ ÔÏ supermicro ÐÌÁÔÆÏÒÍÅ.</div>
<div><br></div><div><span style="font-family:arial, sans-serif;font-size:13px;border-collapse:collapse">> reset_timedout_connection on;š</span></div><div><span style="font-family:arial, sans-serif;font-size:13px;border-collapse:collapse">ËÏÎÅÞÎÏ ×ËÌÀÞÅÎ</span></div>
<div class="im">
<div><span style="font-family:arial, sans-serif;font-size:13px;border-collapse:collapse"><br></span></div><div><span style="font-family:arial, sans-serif;font-size:13px;border-collapse:collapse">> èÏÔÑ 90k - ÜÔÏ × ÏÂÝÅÍ ÎÅ ÍÎÏÇÏ.š</span></div>
</div><div>× 9 ÒÁÚ ÂÏÌØÛÅ ÏÂÙÞÎÏÇÏ =(</div><div class="im"><div><br></div><div><span style="font-family:arial, sans-serif;font-size:13px;border-collapse:collapse">sysctl kern.ipc.nmbclusters=262144</span></div></div><div>
<span style="font-family:arial, sans-serif;font-size:13px;border-collapse:collapse">Õ×ÅÌÉÞÉÌ.</span></div><div><br></div><div class="gmail_quote">2010/12/9 Maxim Dounin <span dir="ltr"><<a href="mailto:mdounin@mdounin.ru" target="_blank">mdounin@mdounin.ru</a>></span><div>
<div></div><div class="h5"><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello!<br>
<div><br>
On Thu, Dec 09, 2010 at 12:07:32AM +0300, -=HaRius=- wrote:<br>
<br>
> ÎÁ×ÅÒÎÏÅ ÐÉÎÁÔØ ÂÕÄÅÔÅ ÎÅ × ÔÅÍÕ ÒÁÓÓÙÌËÉ, ÎÏ ÓÖÁÌØÔÅÓØ!!!<br>
><br>
> Ó 12 ÞÁÓÏ× ÌÅÖÉÍÓ =(<br>
><br>
> ÞÅ ÄÅÌÁÔØ ÕÖÅ ÉÄÅÉ ËÏÎÞÁÌÉÓØ<br>
> ÐÅÒÅËÒÕÔÉÌ sysctl ÕÖÅ ×Ï ×ÓÅ ÓÔÏÒÏÎÙ<br>
> ÓÅÒ×ÁË ÎÁÞÁÌ ÎÅÍÎÏÇÏ ÐÏÌÚÁÔØ, ÎÏ ËÁË ÔÏÌØËÏ<br>
> nginx ÚÁÐÕÓËÁÀ × ËÏÎÓÏÌØ ÓÒÁÚÕ ÎÁÞÉÎÁÅÔ ×ÁÌÉÔÓÑ<br>
><br>
> Dec š8 23:56:08 mail kernel: interrupt storm detected on "irq257:";<br>
> throttling interrupt source<br>
> Dec š8 23:56:08 mail kernel: Limiting open port RST response from 169 to 50<br>
> packets/sec<br>
> Dec š8 23:56:09 mail kernel: interrupt storm detected on "irq257:";<br>
> throttling interrupt source<br>
> Dec š8 23:56:09 mail kernel: Limiting open port RST response from 230 to 50<br>
> packets/sec<br>
<br>
</div>ñ ÐÒÁ×ÉÌØÎÏ ÐÏÎÉÍÁÀ, ÞÔÏ irq257 - ÓÅÔÅ×ÕÈÁ? šåÓÌÉ ÏÎÁ<br>
ÓËÏÌØËÏ-ÎÉÂÕÄØ ÐÒÉÌÉÞÎÁÑ, ÔÏ ÐÏÐÒÏÂÏ×ÁÔØ ÐÏÔÀÎÉÔØ ÂÕÆÅÒÁ/ÚÁÄÅÒÖËÉ<br>
ÐÒÅÒÙ×ÁÎÉÊ. šîÕ ÉÌÉ ÐÒÏÓÔÏ ÐÏÄÎÑÔØ hw.intr_storm_threshold, ÞÔÏÂÙ<br>
ÐÏ ËÒÁÊÎÅÊ ÍÅÒÅ ÓÅÔØ ÐÙÔÁÌÁÓØ ÒÁÂÏÔÁÔØ.<br>
<div><br>
> × ÌÏÇÁÈ ÐÏÌÎÏ:<br>
><br>
> 80.138.138.94 - - [08/Dec/2010:23:32:16 +0300] "GET / HTTP/1.1" 0 0 "-" "IE<br>
> 7.0"<br>
<br>
</div>[...]<br>
<div><br>
> ÞÔÏ ÓÄÅÌÁÎÏ<br>
> 1. fail2ban ÎÁÔÒÁ×ÌÅÎ ÎÁ ÐÏÉÓË ÁÇÅÎÔÁ "IE 7.0" š- ÂÌÏÞÉÔ, ÎÏ ÎÅ ÓÐÁÓÁÅÔ<br>
> 2. ×ÒÅÍÅÎÎÏ location = / { return 200; } - ÎÅ ÓÐÁÓÁÅÔ<br>
> 3. if ($http_user_agent = "IE 7.0" ) { return 412;}<br>
><br>
> š š š š if ($http_referer = "") { return 412;} - ÔÏÖ ÎÅ ÓÔÁÓÁÅÔ<br>
<br>
</div>îÕ ÕÖ ÔÏÇÄÁ return 444;.<br>
<div><br>
> 4. sysctl - ÎÁËÒÕÞÅÎ<br>
><br>
> sysctl -n kern.ipc.numopensockets<br>
> 90228<br>
<br>
</div>reset_timedout_connection on;<br>
<br>
èÏÔÑ 90k - ÜÔÏ × ÏÂÝÅÍ ÎÅ ÍÎÏÇÏ.<br>
<div><br>
><br>
> # netstat -Lan<br>
> Current listen queue sizes (qlen/incqlen/maxqlen)<br>
> Proto Listen š š š š Local Address<br>
> tcp4 š0/0/128 š š š š*.4949<br>
> tcp4 š0/0/4096 š š š 88.212.196.18.443<br>
> tcp4 š0/0/4096 š š š 88.212.196.18.80<br>
> tcp4 š0/0/128 š š š š*.22<br>
> tcp4 š0/0/500 š š š š*.25<br>
> tcp4 š0/0/5 š š š š š88.212.196.18.5666<br>
> tcp4 š0/0/20 š š š š 127.0.0.1.53<br>
> tcp4 š0/0/511 š š š š127.0.0.1.80<br>
> Some tcp sockets may have been created or deleted.<br>
> unix š0/0/1 š š š š š/var/run/fail2ban/fail2ban.sock<br>
> unix š0/0/4 š š š š š/var/run/devd.pipe<br>
<br>
</div>îÕ ÐÒÏÓÔÏ ÔÁËÉ ÔÉÛÉÎÁ É ÐÏËÏÊ. š÷ÐÒÏÞÅÍ, ÜÔÏ ×ÅÒÏÑÔÎÏ ÓÌÅÄÓÔ×ÉÅ<br>
"throttling interrupt source".<br>
<div><br>
> # netstat -m<br>
> 1377/36183/37560 mbufs in use (current/cache/total)<br>
> 754/33038/33792/33792 mbuf clusters in use (current/cache/total/max)<br>
<br>
</div>á ÇÏ×ÏÒÉÔÅ sysctl ÎÁËÒÕÞÅÎ. šõ ×ÁÓ mbuf cluster'Ï× Ó ÇÕÌØËÉÎ ÆÉÇ.<br>
<br>
sysctl kern.ipc.nmbclusters=262144<br>
<br>
÷ nginx'Å ÍÏÖÎÏ ÅÝ£ ÐÏÕÍÅÎØÛÁÔØ ÂÕÆÅÒÁ ÎÁ ÓÏËÅÔÁÈ (listen ...<br>
rcvbuf=... sndbuf=...), ÄÁÂÙ ÎÅÍÎÏÇÏ ÐÏÜËÏÎÏÍÉÔØ ÐÁÍÑÔØ ÅÓÌÉ Å£ ÎÅ<br>
È×ÁÔÁÅÔ.<br>
<div><br>
> 36/1628 mbuf+clusters out of packet secondary zone in use (current/cache)<br>
> 0/0/0/16896 4k (page size) jumbo clusters in use (current/cache/total/max)<br>
> 0/0/0/8448 9k jumbo clusters in use (current/cache/total/max)<br>
> 0/0/0/4224 16k jumbo clusters in use (current/cache/total/max)<br>
> 1852K/75121K/76974K bytes allocated to network (current/cache/total)<br>
> 0/17954981/0 requests for mbufs denied (mbufs/clusters/mbuf+clusters)<br>
> 0/0/0 requests for jumbo clusters denied (4k/9k/16k)<br>
> 0/0/0 sfbufs in use (current/peak/max)<br>
> 0 requests for sfbufs denied<br>
> 0 requests for sfbufs delayed<br>
> 1377 requests for I/O initiated by sendfile<br>
> 0 calls to protocol drain routines<br>
><br>
> ËÁË ÅÝÅ ÂÏÒÏÔØÓÑ ?????<br>
<br>
</div>îÕ É vmstat -z ÐÏÓÍÏÔÒÉÔÅ ÄÌÑ ËÏÍÐÌÅËÔÁ, ÔÁÍ ÌÕÞÛÅ ×ÉÄÎÏ ÞÅÇÏ ÎÅ<br>
È×ÁÔÁÅÔ.<br>
<br>
îÏ ÐÒÉ ÔÁËÏÍ ËÏÌÉÞÅÓÔ×Å mbuf cluster'Ï× ÐÒÉ ÔÁËÏÍ ËÏÌÉÞÅÓÔ×Å<br>
ÓÏËÅÔÏ× - ÓÔÒÁÎÎÏ ÞÔÏ ÏÎÏ ×ÏÏÂÝÅ ÒÁÂÏÔÁÅÔ, ÄÏÌÖÎÏ ×Ó£ ×<br>
zonelimit'Å ×ÉÓÅÔØ ÂÅÓÐÒÏÂÕÄÎÏ.<br>
<font color="#888888"><br>
Maxim Dounin<br>
</font><div><div></div><div><br>
_______________________________________________<br>
nginx-ru mailing list<br>
<a href="mailto:nginx-ru@nginx.org" target="_blank">nginx-ru@nginx.org</a><br>
<a href="http://nginx.org/mailman/listinfo/nginx-ru" target="_blank">http://nginx.org/mailman/listinfo/nginx-ru</a><br>
</div></div></blockquote></div></div></div><br>
</blockquote></div><br></div>