Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

High load / memory use with lots of bruteforce attempt entries #43528

Closed
Skyr opened this issue Aug 8, 2020 · 3 comments
Closed

High load / memory use with lots of bruteforce attempt entries #43528

Skyr opened this issue Aug 8, 2020 · 3 comments
Labels
0. Needs triage Pending check for reproducibility or if it fits our roadmap bug needs info performance 🚀 stale Ticket or PR with no recent activity

Comments

@Skyr
Copy link

Skyr commented Aug 8, 2020

I've been experiencing extremely high load and memory usage both on MySql and the Apache process (I'm using the Docker image for Nextcloud 19.0.1 using Apache). The problem occurred especially when touching my webdav calendar (updates happened after dozens of seconds, if at all); other operations were a bit slowish, but not so strongly affected as the webdav stuff. After a restart, everything went calm - until the next calendar change.

On the website I was greeted with a "30 seconds delay due to bruteforce", which brought to my mind an experiment from a couple of days ago... and sure enough, I left my script running, which failed to login every 5 minutes. Inspecting the DB, I found 69447 rows in the oc_bruteforce_attempts table - almost all of them caused by my script (easy due to distinguish due to the username). After a delete from oc_bruteforce_attempts where ip="a.b.c.d";, 34 entries were left - and performance was back to normal.

So there seems some unholy interaction between the anti-bruteforce-plugin and the webdav interface...

@joshtrichards joshtrichards transferred this issue from nextcloud/bruteforcesettings Feb 12, 2024
@joshtrichards joshtrichards changed the title High load / memory use with lots of entries High load / memory use with lots of bruteforce attempt entries Feb 12, 2024
@joshtrichards joshtrichards added bug 0. Needs triage Pending check for reproducibility or if it fits our roadmap labels Feb 12, 2024
@joshtrichards
Copy link
Member

joshtrichards commented Feb 12, 2024

I've been experiencing extremely high load and memory usage both on MySql and the Apache process

Can you elaborate on what you define as "high memory usage"? Everyone defines this a bit differently.

So there seems some unholy interaction between the anti-bruteforce-plugin and the webdav interface...

The calendar stuff may may have interacted more heavily with the DAV interface, so it may have been more noticeable there.

Outside of the resource usage, it sounds like the brute force protection was behaving as expected.

@joshtrichards
Copy link
Member

The new memcache based backend may help with this: #39870. It was added in v28.

@nextcloud-command
Copy link
Contributor

This issue has been automatically marked as stale because it has not had recent activity and seems to be missing some essential information. It will be closed if no further activity occurs. Thank you for your contributions.

@nextcloud-command nextcloud-command added the stale Ticket or PR with no recent activity label Mar 26, 2024
@nextcloud-command nextcloud-command closed this as not planned Won't fix, can't repro, duplicate, stale Apr 9, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
0. Needs triage Pending check for reproducibility or if it fits our roadmap bug needs info performance 🚀 stale Ticket or PR with no recent activity
Projects
None yet
Development

No branches or pull requests

3 participants