quick question for server gurus

[latinasojourn]

i think this issue was discussed before on GFY but i can't find the thread.

here's the problem.

let's say you have a dedicated box which has tons of video galleries on it.

and you have guys with very high speed connections clicking on like 20 of the vids all for simultaneous dowload, then they go have breakfast.

and maybe you have 5 guys at the same time do this stuff.

this degrades the server performance.

what is the fix in apache to limit concurrent downloads from a single IP# to like maybe 4 or 5 files?

anyone know, or anyone know of a good fix for this scenario? this is getting more common as surfers get ultra high speed connections.

[nestle]

I'd recommend mod_throttle for apache:
http://freshmeat.net/projects/mod_throttle/

here's more info on it:
http://www.snert.com/Software/mod_throttle/index.shtml

[teksonline]

nice try but he would need concurrent which is not supported via clientIP or Remote User


Concurrent
Impose a limit on the number of concurrent requests at any one time. The period specifies how long data is accumulated before the counters are reset. This policy cannot be used with either ThrottleClientIP or ThrottleRemoteUser.

fact of the matter is, they are downloading 2 files at a time max, if they are bypassing this rule, then they are breaking the RFC specs

what you need is RAMMAGE

[ilbb]

I recommend placing all Your content to thttpd server. Apache is too slow.

[teksonline]

dont think you can secure videos on a thttpd server...

[nestle]

If mod_throttle won't work for your needs then try mod_choke:

mod_choke is a module for Apache that limits usage by greedy clients. It's two main functions are to limit the number of concurrent connections per IP, and to limit the rate at which apache sends data to the client.

mod_choke:
http://os.cyberheatinc.com/mod_choke.php

teksonline, mind letting know where I can find some info about 'rammage' ?

[skinnay]

may want to look into mod_limitipconn.c

[chaze]

We have a custom mod that limits the megs per user per day.

Other then that your server shouldn't slow down unless it can't handle the load. You may just need to upgrade your server load handling ability.

Also make sure and block download bots from stealing your content.

http://www.dwhs.com/hostingforum/viewtopic.php?t=1114

And password sharing obviously will drain your server as well so blocking that and hotlinking will make a big difference.

[darksoul]

freebsd has the nice feature of doing this directly from firewall

ipfw add 100 allow tcp from any to any 80 in limit src-addr 5

that will limit the number of connections per ip to 5
iptables has also a patch that can do this.

[latinasojourn]

freebsd has the nice feature of doing this directly from firewall

ipfw add 100 allow tcp from any to any 80 in limit src-addr 5

that will limit the number of connections per ip to 5
iptables has also a patch that can do this.

tip of the hat to "darksoul"

this tweak is now working, the guy throws a download utility on a movie page and can only get 5 at a time.

NICE big BW saver!