[SAC] "TracsvnVM" problems

[Markus Neteler]

On Jan 7, 2017 6:08 PM, "Sandro Santilli" <strk at kbt.io> wrote:
>
> On Fri, Jan 06, 2017 at 10:31:18PM +0100, Sandro Santilli wrote:
> > On Fri, Jan 06, 2017 at 12:25:24PM -0400, Jeff McKenna wrote:
> > > The OSUOSL team rebooted the tracsvn VM.  Trac/SVN back online.
> >
> > From the logs it seems that Apache and fail2ban were both killed by the
> > OOM Killer between 06:28 and 06:49 PST (should be UTC-8).
> >
> > Not sure what was going wrong.
>
> Looking at the server today, as it was being slow, I see
> requests taking lots of CPU time made to these trac.osgeo.org
> URI:
>
>   /mapguide/browser/trunk?rev=9112&format=zip HTTP/1.1
>   /mapguide/browser/trunk?rev=5605&format=zip HTTP/1.1
>
> The first one results in ~40MB of transfer and is requested
> multiple times per minute by the same IP with no Referer and
> a MSIE 7.0 user agent.

That could be solved with a fail2ban filter.

> Should we disable zip downloads ?

Please no.
At least not for all trac instances. AFAIK the GRASS GIS add-on  management
needs it.

Markus
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/sac/attachments/20170107/757a9e1b/attachment.html>