1,122 reputation
42134
bio website xeoncross.com
location
age
visits member for 5 years, 6 months
seen yesterday
Another PHP programmer responsible for things like the MicroMVC PHP framework.

You may notice that some of my questions run very deep into the heart of certain issues because I strive for the highest optimization that is possible in my apps.

Jan
23
comment Separate Nginx access log file for certain requests only
Yep, the doc says that you can use Context: http, server, location, **if in location**, limit_except
Jan
23
comment Separate Nginx access log file for certain requests only
Um, isn't this an access log inside an if statement..?
Jan
23
awarded  Notable Question
Jan
23
accepted Rate limit new connections in IPTables instead of Nginx or HAProxy?
Jan
19
comment dmesg SYN flood on 80 sysctl -p
@SomeGuy you should give an example of intercepting an invalid/small packet in IPTables.
Jan
19
comment Rate limit new connections in IPTables instead of Nginx or HAProxy?
@edlerd I will. It seems like a better approach to all this would be decreasing the timeout, using something like a cookie (so you didn't have to wait for an ACK), or building up ISP reputation somehow so you could learn who was a legitimate gateway and who was just wasting resources.
Jan
19
comment Rate limit new connections in IPTables instead of Nginx or HAProxy?
1) Why rate limit in nginx instead of IPTables? Isn't the same issue with possibly hundreds of users connecting via a proxy or ISP still the same? 2) Limiting SYN connections does see better than NEW (-A INPUT -p tcp --syn right?). However, isn't that the same problem with blocking legitimate traffic? I read something about changing the SYN timeout and "syn-cookies" so I'm going to look into them now. As it is, it doesn't seem possible to rate-limit since a Bot or legitimate ISP could both send 10,000 new syn packets. hrm...
Jan
18
asked Rate limit new connections in IPTables instead of Nginx or HAProxy?
Jan
18
comment iptables port forwarding (prerouting port 80) and firewall not working together
@ArthurCorenzan if you are redirecting 80 traffic to 8080 - why not just run node on 80?
Jan
12
awarded  Popular Question
Dec
31
accepted How to pipe all log files entries to a database on linux?
Dec
31
comment How to pipe all log files entries to a database on linux?
ELK looks perfect!
Dec
31
asked How to pipe all log files entries to a database on linux?
Dec
13
revised Forward traffic to MySQL over two+ SSH hops
added 69 characters in body
Dec
13
asked Forward traffic to MySQL over two+ SSH hops
Dec
13
comment Can't connect to MySQL from another server
Thanks @Navern, I checked and double-checked the password and that wasn't the problem. See updated post.
Dec
13
accepted Can't connect to MySQL from another server
Dec
13
revised Can't connect to MySQL from another server
added 513 characters in body
Dec
13
awarded  Inquisitive
Dec
12
comment Can't connect to MySQL from another server
Good idea, I added a catch-all grant and I still can't connect.