The generated apache configuration does not spawn enough processes and this can lead to a stalling server (potential DoS)

Bug #1658048 reported by Yves-Gwenael Bourhis
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Dashboard (Horizon)
Fix Released
Wishlist
Yves-Gwenael Bourhis

Bug Description

When creating the apache configuration with:

 python manage.py make_web_conf --apache

The apache configuration file does not specify the number of apache processes.
By default apache will spawn only one. not only is it a performance issue, but it can lead to Denial of Service if the apache process is to long to respond or stalled.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to horizon (master)

Fix proposed to branch: master
Review: https://review.openstack.org/423202

Changed in horizon:
assignee: nobody → Yves-Gwenael Bourhis (yves-gwenael-bourhis)
status: New → In Progress
Changed in horizon:
importance: Undecided → Wishlist
milestone: none → ocata-rc1
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to horizon (master)

Reviewed: https://review.openstack.org/423202
Committed: https://git.openstack.org/cgit/openstack/horizon/commit/?id=600620a8d50fc13f7a9cc4901b0307d09039e7bb
Submitter: Jenkins
Branch: master

commit 600620a8d50fc13f7a9cc4901b0307d09039e7bb
Author: Yves-Gwenael Bourhis <email address hidden>
Date: Fri Jan 20 11:49:34 2017 +0100

    Configuring number of apache processes

    By default apache spawns only one process for the wsgi app if not specified.
    This patch detects the number of CPUS to configure n CPUs +1 processes by
    default and allows to specify the number of processes explicitly.

    Change-Id: I684ecd15193cef169d7a86f66a47b7d1d76c1c24
    Closes-Bug: #1658048

Changed in horizon:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/horizon 11.0.0.0rc1

This issue was fixed in the openstack/horizon 11.0.0.0rc1 release candidate.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.