OctoDev Posted April 24, 2015 Share Posted April 24, 2015 I held down F5 on my Community. This would end with constant refresh, i checked the CPU while doing so and it went 100%.. I know this same issue existed on 3.4, i hope this will improve on 4.0 soon.. I replicated the same issue on here, i made the response time increase from 0.5 seconds to 16 seconds or even time out (using check-host.net) .. by just holding down F5 lol now my server is set up pretty well, i am using nginx mariadb, apc and memcached.. Link to comment Share on other sites More sharing options...
SJ77 Posted April 24, 2015 Share Posted April 24, 2015 Not the dreaded "F5 SMASH" troll attack!!! Easiest Denial of service attack ever. Can something like this even be avoided programmatically? Link to comment Share on other sites More sharing options...
OctoDev Posted April 24, 2015 Author Share Posted April 24, 2015 Not the dreaded "F5 SMASH" troll attack!!! Easiest Denial of service attack ever. Can something like this even be avoided programmatically? i only know about one forum software where this happens and you can guess which *Cough* Link to comment Share on other sites More sharing options...
Rhett Posted April 24, 2015 Share Posted April 24, 2015 This would be a server side configuration, a proper firewall will be able to detect multiple connections per xx seconds, and block the offending IP. Link to comment Share on other sites More sharing options...
OctoDev Posted April 24, 2015 Author Share Posted April 24, 2015 This would be a server side configuration, a proper firewall will be able to detect multiple connections per xx seconds, and block the offending IP.I'm wondering why this happens on only IP.Board, out of other forum softwares I've tried? I can't manage to replicate same issue where CPU goes 100% no matter how many cores you have, by just holding down F5. Adding r/s is no issue, but still. Shouldn't be necessary, a website shouldn't be taken down by holding down F5.. Link to comment Share on other sites More sharing options...
ram108 Posted April 24, 2015 Share Posted April 24, 2015 a website shouldn't be taken down by holding down F5.. Sometimes I come to IPB site and hold F5 for 15-30 sec. I don't know why, but I like to see forum down with error. After that I watch how many time they need to start a server again. It can be 10-15 mins or even a day I tried it with many wordpress sites and never got them down. Link to comment Share on other sites More sharing options...
sijad Posted April 24, 2015 Share Posted April 24, 2015 Sometimes I come to IPB site and hold F5 for 15-30 sec. I don't know why, but I like to see forum down with error. After that I watch how many time they need to start a server again. It can be 10-15 mins or even a day I tryed it with many wordpress sites and never got them down. that was you? Link to comment Share on other sites More sharing options...
ram108 Posted April 24, 2015 Share Posted April 24, 2015 that was you? It can be anyone who have F5 on the keyboard (... dont tell me your site name....) :) Link to comment Share on other sites More sharing options...
SJ77 Posted April 24, 2015 Share Posted April 24, 2015 yeah this doesn't seem good. Surely there is some fix. Clearly hitting F5 causes repeat queries to stack. Must be a way to detect and prevent query stack from same userid Link to comment Share on other sites More sharing options...
OctoDev Posted April 24, 2015 Author Share Posted April 24, 2015 Has to be a way to cache results for x amount of time, i don't really know but telling the user to get better firewall is wrong Link to comment Share on other sites More sharing options...
ram108 Posted April 24, 2015 Share Posted April 24, 2015 There are several ways to prevent F5: 1) proper configuration of the server 2) use cache on every level - DB cache, HTML cache, Object cache and others 3) your method? Link to comment Share on other sites More sharing options...
OctoDev Posted April 24, 2015 Author Share Posted April 24, 2015 There are 3 ways to prevent F5: 1) proper configuration of the server 2) use cache on every level - DB cache, HTML cache, Object cache and others 3) your method?my server is more than properly configured and it happens, i shouldn't need to add request limit because of the software, cus it doesnt work on any other CMS i've tried.. means there is something wrong with IPS Link to comment Share on other sites More sharing options...
OctoDev Posted April 24, 2015 Author Share Posted April 24, 2015 lol the site is lagging horribly, someone must be having fun http://techpulse.io/ try it here now and see my surprise lol Link to comment Share on other sites More sharing options...
ram108 Posted April 24, 2015 Share Posted April 24, 2015 http://techpulse.io/ try it here now Got 404 and 403 errors several times with F5 but super fast recovering. How did you do that? Link to comment Share on other sites More sharing options...
OctoDev Posted April 24, 2015 Author Share Posted April 24, 2015 Got 404 and 403 errors several times with F5 but super fast recovering. How did you do that?yeah was configuring it lol, should show a 503 now with a lil message Link to comment Share on other sites More sharing options...
OctoDev Posted April 24, 2015 Author Share Posted April 24, 2015 Link to comment Share on other sites More sharing options...
RevengeFNF Posted April 24, 2015 Share Posted April 24, 2015 On my site and another one i configured, nothing happens. But i tested in other sites and i confirm it can take them down. Link to comment Share on other sites More sharing options...
OctoDev Posted April 24, 2015 Author Share Posted April 24, 2015 On my site and another one i configured, nothing happens. But i tested in other sites and i confirm it can take them down.What did you configure, request limit? Link to comment Share on other sites More sharing options...
RevengeFNF Posted April 24, 2015 Share Posted April 24, 2015 What did you configure, request limit? Nothing. Its very well configured and optimized, but i did not implement a request limit. I tested pressing F5 for 15 minutes, Cpu raised a little bit, but no one noticed the site was being hammered. Link to comment Share on other sites More sharing options...
ram108 Posted April 24, 2015 Share Posted April 24, 2015 Its very well configured and optimized let us try Link to comment Share on other sites More sharing options...
OctoDev Posted April 24, 2015 Author Share Posted April 24, 2015 Nothing. Its very well configured and optimized, but i did not implement a request limit. I tested pressing F5 for 15 minutes, Cpu raised a little bit, but no one noticed the site was being hammered. feel free to link it here and f5 army will test it xD is it http://www.fastnewsforum.net/ Link to comment Share on other sites More sharing options...
RevengeFNF Posted April 24, 2015 Share Posted April 24, 2015 feel free to link it here and f5 army will test it xD is it http://www.fastnewsforum.net/ test iosgods.com Link to comment Share on other sites More sharing options...
ram108 Posted April 24, 2015 Share Posted April 24, 2015 is it http://www.fastnewsforum.net/test iosgods.comBoth sites are OK. I dont know what will be if several people press F5 at same time? Link to comment Share on other sites More sharing options...
OctoDev Posted April 24, 2015 Author Share Posted April 24, 2015 test iosgods.comI couldn't take down this one indeed, Link to comment Share on other sites More sharing options...
Draffi Posted April 24, 2015 Share Posted April 24, 2015 OMG, i have a SQL-Error after checking my site !!! Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.