KiwiFlare

[DavidS877]

I've changed vm.overcommit_memory to 1 which is literally the only tune-up config I can find that might possibly explain spontaneous key eviction in Redis. Redis is basically one click deploy with zero configuration.

My Redis loving friends(don't judge) say if it's not deliberate deletion then it's usually automatic eviction of volatile keys due to memory pressure either from "maxmemory" setting or the overall system RAM. And pointed me at this:

https://redis.io/docs/reference/eviction/

 

[Null]

the maxmemory is 0 which is unlimited, our memory on that server is at 2GB/62GB and we're talking about a couple thousand keys, not billions.

 

[DavidS877]

the maxmemory is 0 which is unlimited, our memory on that server is at 2GB/62GB and we're talking about a couple thousand keys, not billions.

INFO should show if it's evicting stuff or just expiring it. "evicted_keys:" as well as how Redis is feeling about its memory situation(used_memory_peak as well as the MEMORY STATS and MEMORY DOCTOR commands). But it doesn't sound like that should be a problem.

 

[Null]

expired_keys:0
expired_stale_perc:0.00
expired_time_cap_reached_count:0
expire_cycle_cpu_milliseconds:178
evicted_keys:0
evicted_clients:0

they're not expiring and they're not evicting.

lua is the shittiest faggot fucking language and it routinely fails to do something and then just has no error handler and lies about not returning results. the exact same fucking problem was happening with scylla as the backend but I just assumed the cassandra module was old and less mature, whereas redis is baked into fucking openresty so it shouldn't be having any problems at all.

 

[y a t s]

lua is the shittiest faggot fucking language and it routinely fails to do something and then just has no error handler and lies about not returning results. the exact same fucking problem was happening with scylla as the backend but I just assumed the cassandra module was old and less mature, whereas redis is baked into fucking openresty so it shouldn't be having any problems at all.

One does not simply write something in Lua and expect it to work. Fuck that retarded language. I can't stand it.

 

[jertzog]

When is kiwiflare going to stop validating my shit every 2 or 3 clicks?
Is there not a routine that identifies a registered user as a non-ddoser?

 

[Gatdam Animal Person]

At 6AM I had constant 500 error messages and white screen, Tor didn't work, but KiwiFlare was still showing up.

 

[Gargamel]

At 6AM I had constant 500 error messages and white screen, Tor didn't work, but KiwiFlare was still showing up.

I was here when it went down.



It was like that for a few minutes and then it started returning nothing.

 

[CockPockets]

Remember to always check your x-sneed http response header when the site goes down.

 

[Null]

Sorry, a DDoS disrupted service a few hours ago and I'm doing maintenance.

 

[Dixieland Buckaroo]

Just got a 502 bad gateway
It got better
Edit: assume it's related to what dear feeder just said

 

[Null]

I am satisfied with the site performance and I am no longer getting frequently rechecked so I am changing one more thing before considering work done. Lmk if performance or frequent rechecks start happening.

 

[S.C.U.D.]

I use Tor browser for the farms and the first time I start up for the day I get a Kiwiflare error. It is consistently the first time I go to KF for a given day and other than that I don't have any issues, but it is weird that literally every single day I get an error on startup. It's not a big deal, but I thought I should at least bring it up since it is weirdly consistent.

 

[NvII iS 8ulLt f0R 88C]

The /public/ directory is not protected by kiwiflare. Most likely absolutely trivial but wanted to report it anyways in case it poses a security threat. Anyways have a nasheed for your time.

 

[Vecr]

I'm not sure if this is related to anything, but @Null Arch Linux increased a mem map count value on their distro, maybe that could be something to do with your allocation issues earlier? https://archlinux.org/news/increasing-the-default-vmmax_map_count-value/ sudo sysctl -w vm.max_map_count=1048576 because I assume you're not running Arch.

 

[geckogoy]

Is this so-called 'kiwiflare' a service I can purchase?

I read the OP and it didn't mention that so please dont decapitate me with a chainsaw

 

[AnOminous]

Is this so-called 'kiwiflare' a service I can purchase?

I read the OP and it didn't mention that so please dont decapitate me with a chainsaw

It isn't, so far as I know, but @Null would be the person to ask. It's so far as I know just a bespoke service specifically for this site.

 

[Kosher Salt]

Is this so-called 'kiwiflare' a service I can purchase?

I read the OP and it didn't mention that so please dont decapitate me with a chainsaw

If I remember correctly the answer is "no, but at some future point there are plans to release a service that does not have 'Kiwi' in the name".

 

[Maldavius Figtree]

Are the DDoS attacks that break through intermittently circumventing/solving the crypto captcha, or simply saturating the bandwidth?

If the former, I have an idea for an AI proof visual captcha:
Take or generate a big library of photos of obviously black, Jewish, gay, transgender etc people, display 9 of them in a randomly distorted way to prevent automatic detection by image file watermark, and ask the user to input the racial or gender slur fitting the majority of the people depicted. AI can’t say nigger.

 

[Null]

Are the DDoS attacks that break through intermittently circumventing/solving the crypto captcha, or simply saturating the bandwidth?

The recent attacks have been either downloading our entire bandwidth at once (which I've limited) or are attacking the HTTP itself. The most recent ones were using exploits in HTTP2.