Page 1 of 4

Site appears to be having trouble loading

Posted: Fri Feb 07, 2014 10:47 am
by freakazoid
In the last few days, I've been having trouble loading TPFC. I can only access TPFC intermittently.

Any updates, Andrew?

Re: Site appears to be having trouble loading

Posted: Fri Feb 07, 2014 8:02 pm
by Andrew Lee
I just restarted the server and everything seems fine now.

Will closely monitor it for the next couple of days.

EDIT: I am still getting intermittent errors. Not sure what the problem is. Will have to look into it again later in the evening...

Re: Site appears to be having trouble loading

Posted: Fri Feb 07, 2014 10:51 pm
by joby_toss
I was afraid it's something on my end.

http://www.portablefreeware.com/ works fine for me now, but not http://www.portablefreeware.com/index.p ... th+options (I bookmarked the latter to get fast access to the [@] apps).

I get this:

Image

Something must have changed, as http://www.portablefreeware.com/index.php?q=[%40]&m= works now for my purpose.

Re: Site appears to be having trouble loading

Posted: Sat Feb 08, 2014 3:29 am
by Checker
I had problems yesterday (Feb, 07), too.
But now it seems to be fine.

Re: Site appears to be having trouble loading

Posted: Sat Feb 08, 2014 4:00 am
by joby_toss
[@] search operator does not work for me anymore...

Re: Site appears to be having trouble loading

Posted: Sat Feb 08, 2014 4:07 am
by __philippe
PFC web site access has been erratic for me between FEB-05->FEB-07, (mostly not accessible at all, or awfully slow to load);
site status was confirmed "Down" over that period by repeated tests with this handy site accessibility checker:

http://www.isitdownrightnow.com

(Useful tool for confirming a web site server UP/DOWN global status, ruling out local end client-side anomalies.)

Thankfully, PFC access(from BE) is fine again right now.

__philippe

Re: Site appears to be having trouble loading

Posted: Sat Feb 08, 2014 6:14 am
by SYSTEM
Yesterday the site loaded slowly for me as well. It's fine now.
joby_toss wrote:[@] search operator does not work for me anymore...
[@] works fine here if I'm logged in. Vigenere+ (added on February 4) is the newest private entry.

Re: Site appears to be having trouble loading

Posted: Sat Feb 08, 2014 7:03 am
by Checker
@ joby_toss: [@] tested ... works fine.

Re: Site appears to be having trouble loading

Posted: Sat Feb 08, 2014 8:51 am
by joby_toss
[@] and [#] work fine now (after restarting my browser), thank you!

Re: Site appears to be having trouble loading

Posted: Sat Feb 08, 2014 12:44 pm
by Andrew Lee
I can confirm there are some intermittent access issues with TPFC (though it seems to be better today), which is the hardest to fix, so it will need some time for me to work out.

Since the problem cannot be reliably reproduced, I need to look through the logs and see if I can identify any telltales.

Thanks to all for chiming in. Keep the error reports coming in!

Re: Site appears to be having trouble loading

Posted: Sat Feb 08, 2014 4:22 pm
by guinness
No problems in the last 4 hours.

Re: Site appears to be having trouble loading

Posted: Sun Feb 09, 2014 8:37 am
by __philippe
PFC server was misbehaving again on Sun 9-FEB-2014, erratic access between 15:00 and 17:00 CET

Would it be perhaps appropriate to provide a support e-mail address set aside to receive brief notification during extended "server down" events?

__philippe

Re: Site appears to be having trouble loading

Posted: Sun Feb 09, 2014 9:12 am
by Checker
Again, TPFC site was hard to reach between 12:50 and 16:00 CET.

Re: Site appears to be having trouble loading

Posted: Sun Feb 09, 2014 10:14 am
by Wolfghost
Checker wrote:Again, TPFC site was hard to reach between 12:50 and 16:00 CET.
Confirm!

Re: Site appears to be having trouble loading

Posted: Fri Feb 14, 2014 4:46 pm
by Andrew Lee
Apologies for the late reply. I had a really busy week and didn't really have a solid block of time to look into this issue. Plus the issue is intermittent and cannot be reproduced on demand, which makes debugging really difficult.

Anyway, I think I had a breakthrough last evening. I was poking around at the various log files in the system. Then I saw these in /var/log/syslog:

Code: Select all

Feb 14 08:29:40 node2 kernel: [1472700.760454] TCP: drop open request from 37.140.192.202/16181
Feb 14 08:29:40 node2 kernel: [1472700.797664] TCP: drop open request from 37.140.192.202/7223
Feb 14 08:29:40 node2 kernel: [1472700.809924] TCP: drop open request from 37.140.192.202/12718
Feb 14 08:29:40 node2 kernel: [1472700.861615] TCP: drop open request from 37.140.192.202/22241
Feb 14 08:29:40 node2 kernel: [1472700.863818] TCP: drop open request from 37.140.192.202/37359
Feb 14 08:29:40 node2 kernel: [1472700.879039] TCP: drop open request from 23.234.216.122/53893
Feb 14 08:29:40 node2 kernel: [1472700.885875] TCP: drop open request from 23.234.216.122/53894
Feb 14 08:29:40 node2 kernel: [1472700.912008] TCP: drop open request from 37.140.192.202/14666
Feb 14 08:29:40 node2 kernel: [1472700.930421] TCP: drop open request from 37.140.192.202/59870
Feb 14 08:29:45 node2 kernel: [1472705.777591] __ratelimit: 188 callbacks suppressed
I googled around and found that it is a DDOS attack:

http://e-mats.org/2010/01/tcp-drop-open-request-from/

So I took the suggestion and did:

Code: Select all

echo 1 >> /proc/sys/net/ipv4/tcp_syncookies
Immediately all the "drop open request" messages were gone. Instead, I get this:

Code: Select all

Feb 15 00:35:47 node2 kernel: [1530667.463090] possible SYN flooding on port 80. Sending cookies.
and the TPFC site seems to be back to normal now for the times I tested.

If there are any networking experts here who can offer some insight and suggestions, that would be most appreciated.