Previous Next

Thread: FastCGI failed during a ddos attack

Last post 05-31-2008 1:20 PM by brashquido. 1 replies.

Average Rating Rate It (5)

RSS

Page 1 of 1 (2 items)

Sort Posts:

  • 05-08-2008, 9:59 AM

    • cablesimple
    • Not Ranked
    • Joined on 05-08-2008, 1:50 PM
    • Posts 1
    • cablesimple

    FastCGI failed during a ddos attack

    Hi.  I believe our servers experienced a small scale DDOS attack last night.  I say this because I found some DDOS type attacks on our ecommerce software.  I had actually patched that vulnerability but I suppose enought requests will still take things down.

    My issue is surrounding the fact that while FastCGI was not responding for any of the 5 IIS7/FastCGI/PHP sites we are hosting, the webserver was still servicing requests for another site using a different server side technology.  This leads me to believe that I have something wrong in my FastCGI configuration, although at this point it's just a guess.

    Here's the error I was receiving:

    FastCGI Error
    The FastCGI Handler was unable to process the request.

    Error Details:

        * The FastCGI process exceeded configured activity timeout
        * Error Number: 258 (0x80070102).
        * Error Description: The wait operation timed out.

    HTTP Error 500 - Server Error.
    Internet Information Services (IIS)

     

    Here's my fcgiext.ini config:

    [Types]
    php=PHP

    [PHP]
    ExePath=D:\php\php-cgi.exe
    InstanceMaxRequests=10000
    EnvironmentVars=PHP_FCGI_MAX_REQUESTS:10000
    IdleTimeout=300
    ActivityTimeout=300
    RequestTimeout=300

     Would simply turning up theInstanceMaxRequests help?     

     

    Thanks for any assistance

  • 05-31-2008, 1:20 PM In reply to

    • brashquido
    • Top 25 Contributor
    • Joined on 05-21-2006, 8:31 PM
    • Australia
    • Posts 150
    • IIS MVPs
    • brashquido

    Re: FastCGI failed during a ddos attack

    InstanceMaxRequests should always be equal to or less than PHP_FCGI_MAX_REQUESTS. If anything I would suggest decreasing InstanceMaxRequests, and probably MaxInstances while you are at it. Also, any reason your timeout values are so high? Unless you have legitimate requests that are taking 5 minutes to process under load conditions, then I would suggest tighting these up.

    ----------------
    Dominic Ryan
    Microsoft IIS MVP
    www.iis-aid.com
    My IIS articles
    My PHP articles
    My How-to guides
Page 1 of 1 (2 items)
Page view counter