[opensuse-buildservice] Too much request for linked OBS ?
Hi community, I'm encountering some unaccurate behavior with my private OBS instance that may fall me into trouble with guys from the security team ... I'm running a OBS appliance 2.3 and for unknown reasons, this appliances can emit lot of http request to other OBS server it's linked to... For example I've be warned from the security team for about 16 000 000 requests for August (almost 6 per/second)... But I'm only linked to 2 other OBS (one is MeeGo) Is there any reason for this... Is there some inconsistency in my settings? Does this this behavior is normal (I hope it's not!!!) Regards -- Disclaimer ------------------------------------ Ce message ainsi que les eventuelles pieces jointes constituent une correspondance privee et confidentielle a l'attention exclusive du destinataire designe ci-dessus. Si vous n'etes pas le destinataire du present message ou une personne susceptible de pouvoir le lui delivrer, il vous est signifie que toute divulgation, distribution ou copie de cette transmission est strictement interdite. Si vous avez recu ce message par erreur, nous vous remercions d'en informer l'expediteur par telephone ou de lui retourner le present message, puis d'effacer immediatement ce message de votre systeme. *** This e-mail and any attachments is a confidential correspondence intended only for use of the individual or entity named above. If you are not the intended recipient or the agent responsible for delivering the message to the intended recipient, you are hereby notified that any disclosure, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the sender by phone or by replying this message, and then delete this message from your system. -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
Am Freitag, 14. September 2012, 13:49:14 schrieb JAFFREZIC Xavier:
Hi community,
I'm encountering some unaccurate behavior with my private OBS instance that may fall me into trouble with guys from the security team ...
I'm running a OBS appliance 2.3 and for unknown reasons, this appliances can emit lot of http request to other OBS server it's linked to...
For example I've be warned from the security team for about 16 000 000 requests for August (almost 6 per/second)... But I'm only linked to 2 other OBS (one is MeeGo)
It is normal that connections get opened and for one per remote instance a permanent connection. However your numbers sounds too high to me.
Is there any reason for this... Is there some inconsistency in my settings? Does this this behavior is normal (I hope it's not!!!)
I can't really help from here about that. You may want to contact one of our partners for debugging this further (they have also L3 support backing from SUSE). http://openbuildservice.org/help/support/ thanks adrian -- Adrian Schroeter SUSE Linux Products GmbH email: adrian@suse.de -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
Am Montag, 17. September 2012, 16:08:09 schrieb Adrian Schröter:
Am Freitag, 14. September 2012, 13:49:14 schrieb JAFFREZIC Xavier:
Hi community,
I'm encountering some unaccurate behavior with my private OBS instance that may fall me into trouble with guys from the security team ...
I'm running a OBS appliance 2.3 and for unknown reasons, this appliances can emit lot of http request to other OBS server it's linked to...
For example I've be warned from the security team for about 16 000 000 requests for August (almost 6 per/second)... But I'm only linked to 2 other OBS (one is MeeGo)
It is normal that connections get opened and for one per remote instance a permanent connection. However your numbers sounds too high to me.
Is there any reason for this... Is there some inconsistency in my settings? Does this this behavior is normal (I hope it's not!!!)
I can't really help from here about that. You may want to contact one of our partners for debugging this further (they have also L3 support backing from SUSE).
Sorry, please use that link: http://openbuildservice.org/support/ thanks adrian -- Adrian Schroeter SUSE Linux Products GmbH email: adrian@suse.de -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
2012/9/14 JAFFREZIC Xavier <xavier.jaffrezic@renault.com>:
Hi community,
I'm encountering some unaccurate behavior with my private OBS instance that may fall me into trouble with guys from the security team ...
I'm running a OBS appliance 2.3 and for unknown reasons, this appliances can emit lot of http request to other OBS server it's linked to...
For example I've be warned from the security team for about 16 000 000 requests for August (almost 6 per/second)... But I'm only linked to 2 other OBS (one is MeeGo)
Is there any reason for this... Is there some inconsistency in my settings? Does this this behavior is normal (I hope it's not!!!) You should probably investigate the communication with build.meego.com / api.meego.com specifically as this is known to not behave properly.
The Intel OTC guys provide a 'fakeobs' feature for their "OBSLight" thing that you may probably want to look into. BR Carsten Munk
Regards
-- Disclaimer ------------------------------------ Ce message ainsi que les eventuelles pieces jointes constituent une correspondance privee et confidentielle a l'attention exclusive du destinataire designe ci-dessus. Si vous n'etes pas le destinataire du present message ou une personne susceptible de pouvoir le lui delivrer, il vous est signifie que toute divulgation, distribution ou copie de cette transmission est strictement interdite. Si vous avez recu ce message par erreur, nous vous remercions d'en informer l'expediteur par telephone ou de lui retourner le present message, puis d'effacer immediatement ce message de votre systeme.
*** This e-mail and any attachments is a confidential correspondence intended only for use of the individual or entity named above. If you are not the intended recipient or the agent responsible for delivering the message to the intended recipient, you are hereby notified that any disclosure, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the sender by phone or by replying this message, and then delete this message from your system.
-- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
-- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
On Fri, Sep 14, 2012 at 01:49:14PM +0200, JAFFREZIC Xavier wrote:
Hi community,
I'm encountering some unaccurate behavior with my private OBS instance that may fall me into trouble with guys from the security team ...
I'm running a OBS appliance 2.3 and for unknown reasons, this appliances can emit lot of http request to other OBS server it's linked to...
For example I've be warned from the security team for about 16 000 000 requests for August (almost 6 per/second)... But I'm only linked to 2 other OBS (one is MeeGo)
6 requests per sencond seems much too high for me.
Is there any reason for this... Is there some inconsistency in my settings? Does this this behavior is normal (I hope it's not!!!)
That's hard to tell without knowing how those requests look like. Do you see anything suspicious in the scheduler logs? Cheers, Michael. -- Michael Schroeder mls@suse.de SUSE LINUX Products GmbH, GF Jeff Hawn, HRB 16746 AG Nuernberg main(_){while(_=~getchar())putchar(~_-1/(~(_|32)/13*2-11)*13);} -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
participants (4)
-
Adrian Schröter
-
Carsten Munk
-
JAFFREZIC Xavier
-
Michael Schroeder