Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@httpd.apache.org
Received-SPF: pass (herse.apache.org: domain of jslive@gmail.com designates
 64.233.162.225 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=beta;
        h=received:message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth;
        b=blGevWMIiVTTAD+LZLSkeQfX2wen5orkFPvlvRv2l2xNYbUCV6wAdgZwFLNM4pYvzA36DtxGtpajElYoiW6zpk6Ecqk0F4dopJXMHtT3syXuymvnZhoH8hYONkbRRGnWpksDHihM6CCnxycr6vvF62nU872W2jE3XTLmkIRvrXg=
Message-ID: <e498c1660702081103v209da934ybf0a7ce2d02962dc@mail.gmail.com>
Date: Thu, 8 Feb 2007 14:03:16 -0500
From: "Joshua Slive" <joshua@slive.ca>
Sender: jslive@gmail.com
To: dev@httpd.apache.org
Subject: Re: Large Resource Consumption by One User Access to mp3 File
In-Reply-To: <000701c74bb0$5108d890$650a2b0a@WS>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <000701c74bb0$5108d890$650a2b0a@WS>

On 2/8/07, Greg Sims <greg@headingup.net> wrote:

> This consumption of resource seems unfair to other users that are trying to
> use the system at the same time.  Is it possible to control resource
> allocation so that it is fair to all users?

Is there something about the response I made to your dev@httpd
cross-post that you didn't understand or that you wanted clarification
of?
As I said:

The user in question is using some kind of download accelerator that
uses multiple byte-range requests to access the same file
simultaneously over multiple connections.  In general, these
accelerators are designed simply to squeeze out other users and hence
get faster downloads.  It should be considered and handled like a
denial-of-service attack.  Some documentation on that is here:
http://httpd.apache.org/docs/trunk/misc/security_tips.html#dos

In general, either use a firewall to restrict number of connections
per IP, or use a third-party module to do the same.  See
http://modules.apache.org/

Joshua