<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi all,<div class=""><br class=""></div><div class="">Thanks for the note. Yes, the netperf server at <a href="http://netperf.bufferbloat.net" class="">netperf.bufferbloat.net</a> is turned off. The VPS that runs it is consuming its bandwidth limit (4TB per month) at an ever-increasing rate. When that happens, my hosting service (<a href="http://Ramnode.com" class="">Ramnode.com</a> - good guys, stable hosting, great tech support service) automatically turns off the VPS 'til the start of the next month.</div><div class=""><br class=""></div><div class="">In the distant past, the 4 TB sufficed for the entire month. More recently, I would occasionally get a 90% warning by the 25th or 26th of the month. Last month, I hit 90% on Jan 6th(!) so I shut off the netperf server so I could continue to work on it.</div><div class=""><br class=""></div><div class=""><div class=""><span id="displaybandwidthbarInfoSpan1" class="">I briefly turned on netserver on the VPS today. </span><span id="displaybandwidthbarInfoSpan1" class=""><span id="displaybandwidthbarInfoSpan1" class="">At 08:15 today, the VPS control panel showed: 181.7 MB</span> of <span id="displaybandwidthbarInfoSpan2" class="">3.9 TB</span> Used. </span>At 09:16 today, it showed <span id="displaybandwidthbarInfoSpan1" class="">46.3 GB. </span>46 GBytes in 1 hour => ~30 TB/month (!) </div></div><div class=""><br class=""></div><div class="">I'm going to appeal to the group's collective wisdom to find a better solution.</div><div class=""><br class=""></div><div class="">Current mitigations:</div><div class=""><br class=""></div><div class="">- I use iptables to log all netperf connections. I see a pattern of certain IP addresses that seem to be firing off a test every five minutes, 24 x 7 for days at a time.</div><div class=""><br class=""></div><div class="">- A few times a month, I run a script (see findunfilteredips.sh in <a href="https://github.com/richb-hanover/netperfclean" class="">https://github.com/richb-hanover/netperfclean</a>) that scans the log files to count netperf connections and to block devices (using iptables) that have made more than 5,000 connections in the last seven days. This helps, but only delays the inevitable.</div><div class=""><br class=""></div><div class="">Potential (additional) mitigations:</div><div class=""><br class=""></div><div class="">- We could change DNS to spread the load of <a href="http://netperf.bufferbloat.net" class="">netperf.bufferbloat.net</a> across our fleet of servers. (Researchers who need consistent results could still choose a specific server: netperf-east, netperf-west, etc.)</div><div class=""><br class=""></div><div class="">- I could automate the current script to look for heavy users every day or two.</div><div class=""><br class=""></div><div class="">- Maybe I'm doing iptables imperfectly - comments appreciated.</div><div class=""><br class=""></div><div class="">- I have toyed with the notion of tweaking the iptables rules to throttle heavy users (over a certain number of tests/connections per time-period). That way, the 24x7 people would receive, say 3kbps instead of the actual link speed. There are a couple difficulties:</div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>a) I don't want to inconvenience actual researchers/bufferbloat testers. When I test a connection, I typically make 3-10 tests in rapid succession before I go away. This looks an awful lot like the 24x7 folks, except that real testers stop after 15 minutes. Could iptables be tweaked to tell one from the other?</div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>b) When I looked into this, I realized I might need to move the VPS from OpenVZ (which has limited iptables capabilities - no 'ipset' for example) to KVM (which is full virtualization).</div><div class=""><br class=""></div><div class="">- I could just buy more bandwidth. Currently, I pay $194/year for this server with the 4TB limit. Additional bandwidth on this provider is $48/year per additional TB. But 30 TB/month would be pricey.</div><div class=""><br class=""></div><div class="">- I could move to a different hosting service where bandwidth is cheaper. (Any recommendations?)</div><div class=""><br class=""></div><div class="">- Other thoughts? </div><div class=""><br class=""></div><div class="">Thanks.</div><div class=""><br class=""></div><div class="">Rich</div><div class=""><br class=""></div><div class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Feb 5, 2020, at 3:15 AM, Toke Høiland-Jørgensen <<a href="mailto:toke@toke.dk" class="">toke@toke.dk</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">Taran Lynn <<a href="mailto:taranlynn0@gmail.com" class="">taranlynn0@gmail.com</a>> writes:<br class=""><br class=""><blockquote type="cite" class="">All of my attempts to run netperf (and flent) against<br class=""><a href="http://netperf.bufferbloat.net" class="">netperf.bufferbloat.net</a> have failed for the past couple of weeks.<br class="">Netperf seems to work fine between my desktop and laptop, so I don't<br class="">think the issue is on my end. Can anyone verify if the server is up?<br class=""></blockquote><br class="">Rich, I think this one is yours? Did netserver die or something?<br class=""><br class="">-Toke<br class=""></div></div></blockquote></div><br class=""></div></body></html>