More ESTABLISHED connection than Apache child process

From: Bousquet Francois (Francois.Bousquet@cgi.ca)
Date: Tue Jul 06 2004 - 15:02:51 EDT


Hi,

One of my server (E450 2 x UltraSPARC-II@400MHz, 1 Gb RAM Solaris 7 ) is
running Apache 1.3.31 to serve about 10 websites (http and https). This
server is behind a firewall (CheckPoint) which allows only connections to
port 80 and 443.

Apache is configured with MaxClients 300 (compiled in consequence).

We were having test by a 3rd party vendor this afternoon and the number of
ESTABLISHED connection is netstat coming from the 3rd party IP was greater
than the number of max Apache child process.

netstat -an | grep ESTABLISHED | grep -c 123.123.123.123
380

How this is possible ?
Can ESTABLISHED connection be jammed in the IP stack and only cleared after
some time ?

Another question, this 3rd party is telling me that they are only doing 10
request at a time on my server but they were able to flood us in a way that
it was impossible to reach our website during that time. Do you have cues
on what may be wrong with my webserver ? Is the great number of ESTABLISHED
connection is the problem ?

- Frangois
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:29:00 EDT