I am having serious stability issues with Zope. I brought this up about a month ago and, based on very helpful advice, succeeded at setting up Apache in front of Zope. I was assured this would greatly increase stability by filtering out script-kiddie attacks. Alas, it hasn't. Zope still craps out at random, once a day or so. Might the malformed requests be coming in through port 8080 directly, crashing Zope that way? I can't shut off the port in Zope or Apache won't be able to communicate. However, I might be able to set up a packet filter that will stop traffic on port 8080 on the external NIC... for example. But I don't want to plow my way through a kludgey solution that does not address the actual source of the failures. In short, I don't know why I can't trust Zope. This is Bad News because I am trying to finish my first paid Zope contract and I can't deliver an unreliable product. Since Zope is extremely dependable to most people, I am apparently doing Something Wrong. Can anybody tell me if there is any particular problem with my setup? I'm running OpenBSD 3.4 on fairly basic machines: one an HP Pentium III, the other a no-name Athlon box. The operating system seems to have no problem with the hardware. On these I have installed Python 2.1.3 and Zope 2.6.1 and MySQL 3.23 and so on, all from OpenBSD packages. I compiled Apache 2 from source with mod_proxy, mod_http_proxy and mod_rewrite and it successfully routes content from Zope, but was returning Bad Gateway messages until I set it to ignore errors (is this normal? nobody mentioned it). My strategies from here: (1) Try another OS. I put FreeBSD on one machine, and although I did not get the whole thing running it appears that the software in the ports collection is the same as OpenBSD so I don't anticipate any benefit. I would like to hear OS suggestions... except those made by Microsoft. Would some flavour of Linux make my life any easier? (2) Upgrade the software. This will mean building from source and facing, if everything goes perfectly smoothly, hours and hours of compiling time on a P III. Again, this has no promise of helping and could turn into a big waste of time if they don't compile happily. Any help is appreciated! TIA, Murray
On Thu, 25 Mar 2004 11:02:58 -0700 Murray Pearson <murray@ahadesign.ca> wrote:
I am having serious stability issues with Zope.
I brought this up about a month ago and, based on very helpful advice,
succeeded at setting up Apache in front of Zope. I was assured this would greatly increase stability by filtering out script-kiddie attacks.
Alas, it hasn't. Zope still craps out at random, once a day or so. [..]
This may have been suggested earlier, but it's something that will crash Zope on BSD more than anything: Do you have Python compiled with a large enough thread stack size? The default is way too small on BSD. -Casey
Murray Pearson <murray@ahadesign.ca> on 3/25/04 wrote:
My strategies from here: (1) Try another OS. I put FreeBSD on one machine, and although I did not get the whole thing running it appears that the software in the ports collection is the same as OpenBSD so I don't anticipate any benefit. I would like to hear OS suggestions... except those made by Microsoft. Would some flavour of Linux make my life any easier?
(2) Upgrade the software. This will mean building from source and facing, if everything goes perfectly smoothly, hours and hours of compiling time on a P III. Again, this has no promise of helping and could turn into a big waste of time if they don't compile happily.
I would make sure first if all that you build python with a larger stack size. does the Makefile for the python port on OpenBSD have an open called WANT_HUGE_STACK_SIZE ? on FreeBSD it does and you should build python like make WANT_HUGE_STACK_SIZE=1 install (clean). I would generally recommend not use the ports for zope or zope products as its easier to just build it from source. If you're just starting you might want to start with python 2.3.3 and Zope 2.7. hth <--> george donnelly ~ http://www.zettai.net/ ~ "Quality Zope Hosting" Shared and Dedicated Zope Hosting ~ Zope Servers ~ Zope Websites Yahoo, AIM: zettainet ~ ICQ: 51907738 ~ Sales (USA): 1-866-967-3669
Thanks, Casey and George and Sandor, for your suggestions. I am now compiling Python 2.3.3 with the suggested patches and using the large stack size make command. I'll report in later... Murray
I use zope2.7 on OpenBSD 3.4 too, but without any problems. I compiled both python and zope from sources and not from ports. Two suggestions: - consider using "release23-maint" branch from python cvs - if you use any external python module which has C parts (libxml2 for example), check if the dynamic library loader can see them (ldconfig -r) For compiling python, you might want to apply the following patch: http://www.openbsd.org/cgi-bin/cvsweb/~checkout~/ports/lang/python/2.3/p atches/patch-configure_in?rev=1.1.1.1&content-type=text/plain Regards, Sandor
-----Original Message----- From: zope-bounces+zope=netchan.cotse.net@zope.org [mailto:zope-bounces+zope=netchan.cotse.net@zope.org] On Behalf Of Murray Pearson Sent: Thursday, March 25, 2004 12:03 PM To: zope@zope.org Subject: [Zope] Zope Still Crashes Daily
I am having serious stability issues with Zope.
I brought this up about a month ago and, based on very helpful advice, succeeded at setting up Apache in front of Zope. I was assured this would greatly increase stability by filtering out script-kiddie attacks.
Alas, it hasn't. Zope still craps out at random, once a day or so.
Might the malformed requests be coming in through port 8080 directly, crashing Zope that way? I can't shut off the port in Zope or Apache won't be able to communicate. However, I might be able to set up a packet filter that will stop traffic on port 8080 on the external NIC... for example. But I don't want to plow my way through a kludgey solution that does not address the actual source of the failures.
In short, I don't know why I can't trust Zope. This is Bad News because I am trying to finish my first paid Zope contract and I can't deliver an unreliable product. Since Zope is extremely dependable to most people, I am apparently doing Something Wrong.
Can anybody tell me if there is any particular problem with my setup?
I'm running OpenBSD 3.4 on fairly basic machines: one an HP Pentium III, the other a no-name Athlon box. The operating system seems to have no problem with the hardware. On these I have installed Python 2.1.3 and Zope 2.6.1 and MySQL 3.23 and so on, all from OpenBSD packages. I compiled Apache 2 from source with mod_proxy, mod_http_proxy and mod_rewrite and it successfully routes content from Zope, but was returning Bad Gateway messages until I set it to ignore errors (is this normal? nobody mentioned it).
My strategies from here: (1) Try another OS. I put FreeBSD on one machine, and although I did not get the whole thing running it appears that the software in the ports collection is the same as OpenBSD so I don't anticipate any benefit. I would like to hear OS suggestions... except those made by Microsoft. Would some flavour of Linux make my life any easier?
(2) Upgrade the software. This will mean building from source and facing, if everything goes perfectly smoothly, hours and hours of compiling time on a P III. Again, this has no promise of helping and could turn into a big waste of time if they don't compile happily.
Any help is appreciated! TIA, Murray
_______________________________________________ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
participants (4)
-
Casey Duncan -
george donnelly -
Murray Pearson -
zope＠netchan.cotse.net