[OSM-dev] Connection Limit

[Robert (Jamie) Munro]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Tom Hughes wrote:
> I have applied a connection limit to the web server on www.openstreetmap.org
> that limits the number of simultaneous connections from any one IP address
> to twenty. After that requests will get a "403 Forbidden" response.
> 
> This was primarily done because a pair of IP addresses were bombarding
> the server with map requests to the API and the server seemed to have
> more or less ground to a halt as the requests were coming in faster than
> the server could handle them - there were in fact over 220 connections
> from those two addresses when I applied the limit.

I'd be tempted to just block those 2 addresses completely. No sane
system should make 110 simultaneous connections ever. That's more like a
DDOS attack than normal usage.

If someone complains, we can find out what they were trying to do.

Robert (Jamie) Munro
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGcFDVz+aYVHdncI0RAjMvAJ95VvzvzTRt7ZKsxzm2h33y0KNoOwCgjt1p
GsqAKVjxhsNPnDOsTa6cDgo=
=n7Xp
-----END PGP SIGNATURE-----