Bug Board slowed to a crawl after installation

[Midgard]

Purchased branding free version last night and installed today, using Xcache. Httpd then slowed to barely a crawl, even though server loads were normal. The problem continued even after I turned vBO off through the cp. I thought something unrelated, like DoS, was going on.

I finally disabled vBO through products and everything returned to normal.

I reenabled, changing from Xcache to Filecache. Same thing.

Each time it's enabled, I see a couple hundred of these persistent connections in netstat:

174.121.229.146:58801 91.192.38.87:80 SYN_SENT

No idea what that is.

 

[Fillip H.]

Turning vBO off in the CP means it's not running same as if it's disabled, so I'm inclined to believe there's something else going on. Did you create / CHMOD the cache directory as per the instructions?

 

[Midgard]

For filecache, yes. I initially used Xcache.

I thought turning off in the cp would be the same, too. But I've been through this twice. As soon as I re-enable in products, any page takes minutes to load, even when VBo is turned off in the cp. And those SYN_SENT requests seem really weird..

 

[Fillip H.]

This is what I found on Google regarding that state: What does syn_sent mean? - Binary Revolution Forums

 

[Midgard]

Yeah, I did some Googling too this afternoon. I've run my own Linux servers for eleven years, and I've never seen anything like that in netstat. I was afraid I'd been hacked. But it went away both times I disabled vBO. Might be something on my end, but it's definitely interacting with vBO.

There are no other websites running on this server, btw. And it's pretty high-end, 4 quadcore cpus, 32gb, 4x sas raid10, so it takes something to slow it down.

 

[Fillip H.]

We're running ~6 sites on a CentOS 5.5 x64 w/ Dual 5518's, 12 GB RAM and 2x 150 GiB 15k RPM SAS RAID0 drives, and we have zero issues with vBO or any other mod in fact.

About 4 of those sites are running vBO as well as most of our other mods.

 

[Midgard]

I've never had a mod break the server, as far as I can remember. I presume you have all the original files restored after the VBSEO exploit you mentioned in an earlier thread. I downloaded vBO after that, and those bogus index.php files you mentioned weren't included.

I also run VBSEO. Kinda' wish I didn't. But their utility didn't show anything bogus before I patched it.

 

[Fillip H.]

Yeah that wouldn't be related to this.

 

[Midgard]

OK...I tried a third time, enabling vBO. Same thing. Board slowed to a really slow crawl, and those couple hundred SYN_SENT requests immediately came back, something presumably using my server to attempt syn flooding of that site in the Netherlands. Shut it back down, taking me several minutes since pageloading was so slow.

Uninstalled it. Downloaded v. 2.0.1 and installed it. It appears to be working fine, with all options enabled, and a noticeable reduction in server load.

I'd prefer to use the current version, of course, but this one does most of what I want, namely caching of guest pages. The real test will come with the next Jackhammer-style DoS attack, which uses up to several hundred proxies to pound guest pages. I had one earlier this afternoon, but they seem to have quit, even after I unbanned their IPs. Can't get good help nowadays.

 

[Fillip H.]

I'll do some file comparisons of those two versions later and see if I can find any differences that'd explain this