From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.comp.sysutils.supervision.general/713 Path: main.gmane.org!not-for-mail From: "Clemens Fischer" Newsgroups: gmane.comp.sysutils.supervision.general Subject: Re: Respawn limit for runsv? Date: 14 Feb 2005 17:23:42 +0100 Message-ID: References: <20050213134736.14448.qmail@d8e68f84add864.315fe32.mid.smarden.org> NNTP-Posting-Host: main.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: sea.gmane.org 1108398092 28429 80.91.229.2 (14 Feb 2005 16:21:32 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Mon, 14 Feb 2005 16:21:32 +0000 (UTC) Original-X-From: supervision-return-952-gcsg-supervision=m.gmane.org@list.skarnet.org Mon Feb 14 17:21:32 2005 Original-Received: from antah.skarnet.org ([212.85.147.14] ident=qmailr) by ciao.gmane.org with smtp (Exim 4.43) id 1D0iyT-0005sT-Ru for gcsg-supervision@gmane.org; Mon, 14 Feb 2005 17:21:26 +0100 Original-Received: (qmail 16280 invoked by uid 76); 14 Feb 2005 16:24:07 -0000 Mailing-List: contact supervision-help@list.skarnet.org; run by ezmlm List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Archive: Original-Received: (qmail 16274 invoked from network); 14 Feb 2005 16:24:07 -0000 X-Qmail-Scanner-Mail-From: ino-qc@spotteswoode.de.eu.org via mail-out02 X-Qmail-Scanner: 1.20rc3 (Clear:RC:1:. Processed in 0.483472 secs) Mail-Followup-To: supervision@list.skarnet.org Original-To: supervision@list.skarnet.org In-Reply-To: (Lars Kellogg-Stedman's message of "Sun, 13 Feb 2005 18:19:37 +0000 (UTC)") User-Agent: Gnus/5.110003 (No Gnus v0.3) Emacs/21.3.50 (berkeley-unix) X-MailScanner-To: gcsg-supervision@gmane.org Xref: main.gmane.org gmane.comp.sysutils.supervision.general:713 X-Report-Spam: http://spam.gmane.org/gmane.comp.sysutils.supervision.general:713 * Lars Kellogg-Stedman: > Having said that, an external implementation does work, although the code is > a little more complicated since it becomes necessary to maintain some sort > of external state. this is the same problem as making a connection limiter for tcpserver/tvpsvd. this can become important for services under DOS attacks. i have such a beast, written in guile-scheme (for experimenting), and the database part works, but not logging by writing to stderr. the correct place to implement a simple algorithm (don't let some IP connect more then N times in T seconds) would be the servers themselves. > But with a working external solution, I'm probably too lazy to pursue > anything else. you could still make a patch and send it to the list. me, i don't dare to until i thought out all the issues with a simple but propably big and ever changing hash table on file. clemens