Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I am serving mp3s with a minimalistic nginx server. What I see in my log files is that there are a lot of requests, in particular from AppleCoreMedia and sometimes Android useragents, that flood the server with short requests. Sometimes they keep requesting to download the same partial content for a very long time; sometimes more than an hour. For example:


"GET /somefile.mp3 HTTP/1.1" 206 33041 "AppleCoreMedia/1.0.0.9B206 (iPhone; U; CPU OS 5_1_1 like Mac OS X; en_us)"
"GET /somefile.mp3 HTTP/1.1" 206 33041 "AppleCoreMedia/1.0.0.9B206 (iPhone; U; CPU OS 5_1_1 like Mac OS X; en_us)"
"GET /somefile.mp3 HTTP/1.1" 206 33041 "AppleCoreMedia/1.0.0.9B206 (iPhone; U; CPU OS 5_1_1 like Mac OS X; en_us)"
[...]

I also get a lot, but not as much, of these:

"-" 400 0 "-" 
"-" 400 0 "-"

The IP addresses are always from clients that start downloading shortly after that request, usually they have roughly the same UserAgent as in the first example. emphasized text I have enabled server throttling and connection limits in nginx to limit the huge amount of log entries from equivalent IPs at least somewhat.

There was a performance issue when I saw the same behaviour on the previous server that used Apache. I installed nginx on a better server then moved the site. When Apache could not handle more connections from the increasing number of clients effectively that server was ddossed. There was no bandwidth issue with already connected clients and I don't know if the already connected clients were using more than one connection at a time.

Please tell me:

  • Are clients that appear to get stuck on a download a Bad Thing™

I heard people say their mobile bandwidth use was much higher than they could account for. I'm thinking this type of client behaviour can account for that. And costs us more bandwidth too.

  • Which up to date alternatives exist out there that can handle serving this type of data better than plain HTTP?
  • Useful general insights for someone who just came into this field straight out of the late 90s. :-)
share|improve this question

2 Answers 2

Second issue first:

"-" 400 0 "-"

This generally means that the client opened a Keep-Alive connection, but then disconnected after receiving a response to its previous request. Since the web server was expecting something, it logs a bad request (HTTP 400). These are mostly harmless.

Now, what is the problem with iPhones downloading partial content? Is it just the log files being large? You can turn off logging for specific requests using nginx directives. If it's causing a performance problem, or if the clients aren't able to access the resources, then maybe you should start worrying. But you didn't explicitly mention either of these.

(All that said, that's strange behavior from an iPhone; it wastes both network resources and battery life, things mobile devices have in short supply.)

share|improve this answer
    
Good point, I forgot to tell you about the problem that did occur. I have added it to my question. –  drumfire Sep 20 '12 at 21:00

iOS will make range requests for video / audio content, including if played via <video> and <audio> HTML5 tags, and they'll abort once they have enough for the user to listen to for a while. This is a good thing - it'll only fetch them as-needed, so if someone doesn't listen to / watch the whole thing, you don't waste bandwidth sending the entire file.

share|improve this answer
    
Yes, but we don't embed the files, we serve them via a 'DirectoryIndex' –  drumfire Sep 20 '12 at 21:00
    
Doesn't matter, they load them the same way. –  ceejayoz Sep 20 '12 at 21:02
    
Yep, range requests are fine, but 32K bytes? That's hardly enough for listening for a while. Perhaps @drumfire didn't post a representative sample of log entries? –  Michael Hampton Sep 20 '12 at 21:04
    
I did. This came directly out of the logs, I only removed the IP address and referer. –  drumfire Sep 20 '12 at 21:21

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.