DucDigital's questions

This is a big headache for me for a few days now.

I having 2 servers on different location. We use OpenVPN to connect between the 2 servers.

Server1 has a Uplink of ~100mbps (OPENVPN Server)
Server2 has a Uplink of ~50mbps  (OPENVPN Client)

However, after i config the openVPN within the 2, i can hardly surpass 2mbps speed.

I use HTTP to test the uplink of each other.

              HTTP, NO VPN         HTTP, WITH VPN
SV1<->SV2     48mbps(6MB/s)        2-3mbps (~200-300KB/s)

Here is my Configuration on serverside (SV1):

port 1194
proto udp
dev tun
#tun-mtu 9000
fragment 0
mssfix 0
ca ca.crt
cert mysite.crt
key mysite.key
dh dh1024.pem
cipher none
auth none
server 10.8.0.0 255.255.255.0
keepalive 10 120
comp-lzo
max-clients 1
persist-key
persist-tun
#status openvpn-status.log
#verb 3

On Client Side (SV2)

client
proto udp
dev tun
#tun-mtu 9000
remote 123.34.56.7 1194
resolv-retry infinite
nobind
#persist-key
#persist-tun
cipher none
auth none
ca ca.crt
cert mysite.crt
key mysite.key
comp-lzo
#verb 3

Most of the test on iperf showing the same speed at 1mbps.

[ ID] Interval       Transfer     Bandwidth       Jitter   Lost/Total Datagrams
[1884]  0.0-10.0 sec  1.20 MBytes  1.00 Mbits/sec  6.220 ms   38/  893 (4.3%)
[1884] local 10.8.0.1 port 11100 connected with 10.8.0.6 port 54784
[ ID] Interval       Transfer     Bandwidth       Jitter   Lost/Total Datagrams
[1884]  0.0-10.0 sec  1.21 MBytes  1.01 Mbits/sec  6.307 ms   29/  893 (3.2%)
[1884] local 10.8.0.1 port 11100 connected with 10.8.0.6 port 50475
[ ID] Interval       Transfer     Bandwidth       Jitter   Lost/Total Datagrams
[1884]  0.0-10.0 sec  1.19 MBytes   996 Kbits/sec  6.564 ms   45/  893 (5%)
[1884] local 10.8.0.1 port 11100 connected with 10.8.0.6 port 44565
[ ID] Interval       Transfer     Bandwidth       Jitter   Lost/Total Datagrams
[1884]  0.0-10.0 sec  1.20 MBytes  1.01 Mbits/sec  6.152 ms   34/  893 (3.8%)

What should I do to improve this?

I am having 2 computer on different network over internet.

Currently I am trying to figure out away to connect between the 2 computer for a PHP script.

Setting:

--------------------            -------------------
|COMP A (201.1.1.4)             |COMP B (101.1.1.2)
--------------------            -------------------
|Webserver               <->    |Webserver
|PHP                            |
|Windows Server                 |Ubuntu
|Store only script              |Store files
--------------------            -------------------
*Over Internet , 50mbps link

There are 2 PHP script. One is to put the file in COMP B, and the other one count the number of file in COMP B.

Script 1 current functionality: 
-User upload file. Save the orignal. (/zip/)
-Extract, save it in an extracted folder (/extract/)

Script 2 current functionality:
-Read from /resize/
-if not exist, look for the same file name on the extracted folder (/extract/)
-Resize and save it on the /resize/
-Count file from /resize/ and /extract/

Of course doing a sftp or ftp request will take lots of time, slowdown the performance, and also everytime user access the script, it create another FTP session which is not good.

As I can see this is quite heavy file reading. I need some way of making permanent links between these servers for these purpose. (at least count the number of file on a folder)

I'm looking in VPN and SSH but wondering if there are any software or methods of doing so. Also if you can suggest a better method, please do so.

The script will have to change to adapt to the best method. ^^

Thank you very much. Hope I get the answer soon.

Just a quick question:

How can I prevent nginx from trimming file name with ... in listing directory?

I have a linux server on configuration with apache. However I cannot get access to it using a remote computer.

I can ssh to the server normally.

my IP table:

Chain INPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED
ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:22
REJECT     all  --  0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
REJECT     all  --  0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited

netstat -ant

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address               Foreign Address             State
tcp        0      0 0.0.0.0:3306                0.0.0.0:*                   LISTEN
tcp        0      0 0.0.0.0:111                 0.0.0.0:*                   LISTEN
tcp        0      0 SERVERIP:80                 0.0.0.0:*                   LISTEN
tcp        0      0 0.0.0.0:22                  0.0.0.0:*                   LISTEN
tcp        0      0 127.0.0.1:25                0.0.0.0:*                   LISTEN
tcp        0      0 0.0.0.0:45117               0.0.0.0:*                   LISTEN
tcp        0    196 SERVERIP:22                 MyIP:3149                   ESTABLISHED
tcp        0      0 :::111                      :::*                        LISTEN
tcp        0      0 :::22                       :::*                        LISTEN
tcp        0      0 :::47193                    :::*                        LISTEN

using Curl SERVERIP:80 and curl localhost:80, both return default page from apache.

What could be the problem?

I am just curious about the server configurations to serve just static files from one server.

Is it possible to build a server that just for static files and serve millions of concurrent connections. What could be the best HTTPD service for this?

The server will only serve static files from directories and will not use any other service beside a HTTPD and ofcourse no PHP.

I have a server runing on Windows Server 2003 and was installed Apache.

The server have around 900 HTTP connections at once. which is not that high.

The webpage is just a simple php page that return around 2KB of output.

I have the ff. Test case:

1. I let the site run normally, -> slow webpages
2. I put up an rand() to cut down half of the visitors. The CPU perfomance are always stays low, but the connections are high and webpages are slow.
3. I delete the record of that webpage on apache config. As I do a netstat, I still sees high http connection pointing to that address. The server return an 404 but it is still very slow. Connection stays high (900)
4. I change the DNS record and point to something else. Now it works normally.

Additional details

We just make another test where SendFile and MMAP is turned on. also Gzip is configured. Keep-alive: off.

the domain dns still point to my server. As we start the apache server, everything work perfectly fast. But after the connections reach around 600. It getting slow.

Conclusion:

Does that mean that Apache cannot handle that high number of requests? Is there any posible way to increase this number? Because base on my opinion, 900 req/s is not so high.

Thank you

We just config our website to our new server running on Windows Server 2008.

Our server is quite strong, Xeon quadcore 3.0 and 25GB ram. Running Mysql and Apache

Problem is we are running high on CPU. From taskmanager usually shows 90 -> 100% CPU max in all core. This CPU are all in process httd from Apache.

Running

netstat -ano | find /c "80"

We found out that the server always busy with around 2200 -> 2700 connections on port 80. Could this be a ddos attack, how could we re-config to optimize our server and block unnecessary requests?

How should I allow only GET request to access all the files and script from my server using htaccess?

My web server is Apache

I am running squid proxy, and currently my users are being configured directly to the squid server. I am trying to setup a proxy.pac to simplify the process.

The proxy.pac working fine in the network by configuring the configuration URL, but we need to make the user find out proxy.pac automatically so that there won't be any further necessary config for the end user.

How can I config the DHCP server to supply proxy(proxy.pac) automatically to my users?

I am running DHCP on windows server 2003. Proxy on squid. No active directory.

Is it possible and how can I zip a symlink from a linux shell?

Currently i am running a squid server to load balance between 2 server using round robin.

But after running for few days, i found out that the server 1 is getting slower. Is there anyway I can use CPU Performance to determine which server should get more user using squid?

Thank you

I just installed Nginx on my machine to run Nginx. After install and config. I try to run nginx and got this problem:

bind() to 0.0.0.0:8843 failed (1:Operation not permitted)

I have no idea what this problem is and how to fix it. Google cannot find any related result also.

Is there anyway to fix?

Thank you

Force DNS on router instead of ClientSide DNS like OpenDNS or GooglePublicDNS

Im trying to implement some site blocking using DNS, the hardware is simple Routers like Linksys and Netgear that you use in house for family purpose.

Currently I tried to set a computer to opendns, while my router set to something else, when check using opendns.com/welcome, the computer is identified as opendns. and Vice versa, this time the computer didn't identified as opendns.

Is it posible to force user to use our DNS instead of their setting DNS?

this is just a small hacking attemp to our router.

I'm trying to setup a small DNS and forward webpages through proxy behind the scene. I've successfully implement the DNS server that will do the resolving or anything involved in address resolve.

But is there anyway I can forward the user using DNS to a proxy instead of request directly to the server? Are there any software/opensource that I can use?

I notice on paid wireless, they can provide a login page if user is not login yet, i think this is a way of implementing proxy.

Also the hardware is very basic with linksys and netgear router which connect directly to the internet. It's a basic LAN

Is there anyway to config IIS to serve static file like CDN? Like Gzip, Cache, E-tag, Mod-date?

And how should we config to make it very robust on massive requests?

I know it's a short question but that's all I want to ask.

To the question on the IIS version, i prefer 6 and 7 IIS. You can give your answer on either 6 or 7 :)

Thanks! I hope people find this question useful!

I have my VPN set up properly in Windows Server 2003. But there are some issue in it.

I have always been scheduled a restart at midnight, when the restart finish, the VPN does not automaticaly reconnect again. I've look in the options but no where to be found. Can someone point out where should I setup so that my VPN will automatically reconnect at windows startup?

Thank you

I have been curious on this for a while since there are some people who use a modified CAT5e cable with a switch to disconnect data sending without actually disconnecting the whole internet connection.

For the above statement: I will explain further: they cut the green wire inside the CAT5e cable, attach a switch and from there they can just simply switch on and off without actually disconnecting.

Can someone explain what colors correspond to what functions in Cat5e?

If so I would be very appreciative. Thank you very much!

some how im developing ASp.net mvc application, the DELETE method work fine in VS server, but however, when i test it in an IIS. it's not working and absolutly return a 405 Error..

and currently, I dont know where and how i can get IIS allow my DELETE/PUT HTTP method in my application....

Can some one help me please?