Professional Web Applications Themes

Solaris-x86-8 / Apache network glitches - Sun Solaris

I have Solaris8-x86 installed on a Compaq DL380 which serves images using Apache(1.3.26). Recently, there are network "glitches" at random times. They usually occur near the time there is a peak in traffic shown in MRTG. The average traffice is 639 Kbits/s, with peaks around 1.1Mbits/s. Around the times of a glitch, I find the following in the messages log: Sep 14 21:26:17 baboo tcp: [ID 995438 kern.warning] WARNING: High TCP connect timeout rate! System (port 80) may be under a SYN flood attack! Sep 15 15:55:03 baboo tcp: [ID 995438 kern.warning] WARNING: High TCP connect timeout rate! System (port ...

  1. #1

    Default Solaris-x86-8 / Apache network glitches

    I have Solaris8-x86 installed on a Compaq DL380 which serves images
    using Apache(1.3.26). Recently, there are network "glitches" at
    random times. They usually occur near the time there is a peak in
    traffic shown in MRTG. The average traffice is 639 Kbits/s, with
    peaks around 1.1Mbits/s.

    Around the times of a glitch, I find the following in the messages
    log:

    Sep 14 21:26:17 baboo tcp: [ID 995438 kern.warning] WARNING: High TCP
    connect timeout rate! System (port 80) may be under a SYN flood
    attack!
    Sep 15 15:55:03 baboo tcp: [ID 995438 kern.warning] WARNING: High TCP
    connect timeout rate! System (port 80) may be under a SYN flood
    attack!
    Sep 18 03:31:10 baboo tcp: [ID 995438 kern.warning] WARNING: High TCP
    connect timeout rate! System (port 80) may be under a SYN flood
    attack!

    I wrote a script to watch the number of sockets in the SYN_RCVD state.
    My logs show that number of SYN_RCVD's follow typical traffic flow
    throughout the day.

    I have tried tuning the system, and have been watching with `netstat
    -m`. Here is a typical output from a middle-to-busy day:

    streams allocation:
    ulative allocation
    current maximum total failures
    streams 195 270 102208 0
    queues 564 781 350380 0
    mblk 2046 4191 1338313 0
    dblk 2041 4134 7330186 0
    linkblk 5 169 6 0
    strevent 7 169 14152 0
    syncq 9 39 154 0
    qband 0 0 0 0

    795 Kbytes allocated for streams data

    Can you think of anything else to whip this system into shape or what
    may be causing these network "glitches"?
    Matt Guest

  2. #2

    Default Re: Solaris-x86-8 / Apache network glitches

    com (Matt Reinhart) wrote in message news:<google.com>... 

    Might be related to:

    http://groups./group/solarisonintel/message/52091

    ---Bob
    Bob Guest

  3. #3

    Default Re: Solaris-x86-8 / Apache network glitches

    net (Bob Palowoda) wrote in message 

    If you follow all of the links discussing the subject, someone
    mentions running `prtconf -pv` and searching for 'Pro100'. I did that
    and it has 'revision-id: 00000008'. According to those discussions,
    revision-id 12 is affected. However, I am experiencing similar
    problems.

    Maybe now I can convince my client to drop Solaris on this box.. I
    think that would definitely solve the problem!
    Matt Guest

  4. #4

    Default Re: Solaris-x86-8 / Apache network glitches

    On Mon, 22 Sep 2003 00:12:21 -0700, Matt Reinhart wrote:
     

    Yes, for sure Windows Server 2003 will solve all your problems. You can
    even save a nickel per transaction.

    Dave Guest

  5. #5

    Default Re: Solaris-x86-8 / Apache network glitches

    com (Matt Reinhart) wrote in message news:<google.com>... 
    >
    > If you follow all of the links discussing the subject, someone
    > mentions running `prtconf -pv` and searching for 'Pro100'. I did that
    > and it has 'revision-id: 00000008'. According to those discussions,
    > revision-id 12 is affected. However, I am experiencing similar
    > problems.
    >
    > Maybe now I can convince my client to drop Solaris on this box.. I
    > think that would definitely solve the problem![/ref]

    Actually I have rev 12 and no performance problems with Apache. You
    didn't explain which patch levels your on. It would help if you get
    the admin to help you.

    ---Bob
    Bob Guest

  6. #6

    Default Re: Solaris-x86-8 / Apache network glitches

    I've requested a new NIC (this system does hot-swap PCI so hopefully
    it won't need downtime). Once that is installed (hopefully by next
    week), I'm going to test it hard. All of the hardware guys have been
    searching for a solution to this (we know that it is definitely not a
    SYN flood attack ;-)).
     

    I AM the admin! :-)
    Matt Guest

  7. #7

    Default Re: Solaris-x86-8 / Apache network glitches

    > You didn't explain which patch levels your on.

    Solaris 8 2/02 s28x_u7wos_08a INTEL

    Continuing issues:

    They installed a 3c905C, which didn't work. It must be a revision
    that doesn't work with Solaris (big surprise!), but I cannot risk
    another "bad" card. Does anyone have a recommendation for a different
    NIC which will work? The server is a Compaq DL380 G3 running Solaris
    8 2/02.

    Compaq's recommended upgrades aren't doented to support Solaris.
    Has anyone had any luck with any of the NICs on this(*) page?

    * - http://h18000.www1.hp.com/products/servers/networking/index.html
    Matt Guest

  8. #8

    Default Re: Solaris-x86-8 / Apache network glitches

    On Thu, 25 Sep 2003 14:30:24 -0700, Matt Reinhart wrote:
     
    >
    > Solaris 8 2/02 s28x_u7wos_08a INTEL
    >
    > Continuing issues:
    >
    > They installed a 3c905C, which didn't work. It must be a revision
    > that doesn't work with Solaris (big surprise!), but I cannot risk
    > another "bad" card. Does anyone have a recommendation for a different
    > NIC which will work? The server is a Compaq DL380 G3 running Solaris
    > 8 2/02.[/ref]

    PCI NIC which is best supported is Intel 82557/82558. Part number should
    be PILA-8460B.

    Dave Guest

  9. #9

    Default Re: Solaris-x86-8 / Apache network glitches

    > PCI NIC which is best supported is Intel 82557/82558. Part number should 

    Okay. I'm going to give this a shot. It seems like a similar card as
    the embedded ethernet (obviously a different revision), but we'll see
    how it works once installed next week.
    Matt Guest

  10. #10

    Default Re: Solaris-x86-8 / Apache network glitches

    com (Matt Reinhart) wrote in message news:<google.com>... 
    >
    > I AM the admin! :-)[/ref]

    You didn't state the major rev and patch levels
    of the OS your working on.

    ---Bob
    Bob Guest

  11. #11

    Default Re: Solaris-x86-8 / Apache network glitches

    UPDATE:
    I'm still perplexed. New card works the same. I just got into the
    box (this was unlikely as the problem is happening right now). I
    loaded top and the load average is through the roof!

    load averages: 81.16, 65.18, 48.51

    At one point during this, there were TONS of packets at SYN_RCVD.

    $ netstat -na | grep -c SYN_RCVD
    1447
    $ netstat -na | grep -c SYN_RCVD
    1010

    Someone help!

    com (Matt Reinhart) wrote in message news:<google.com>... 
    >
    > Okay. I'm going to give this a shot. It seems like a similar card as
    > the embedded ethernet (obviously a different revision), but we'll see
    > how it works once installed next week.[/ref]
    Matt Guest

Similar Threads

  1. CF MX 7 with Apache 2.2 on Solaris 10
    By ZJ825 in forum Coldfusion Server Administration
    Replies: 1
    Last Post: April 10th, 06:01 PM
  2. installin php, apache and mysql on solaris 8
    By Tony in forum Linux / Unix Administration
    Replies: 1
    Last Post: March 3rd, 02:21 AM
  3. solaris 9 and apache server
    By dave in forum Sun Solaris
    Replies: 2
    Last Post: September 15th, 10:51 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139