admin wrote
As we discussed by email, the 20-second blackout issues seem to be caused by a visitor "stealing" all your bandwidth and saturating all your connections.
Admin: Could you discuss this particular "blackout" problem? I've had very infrequent reports from a client where a web request takes 15 to 20 seconds to respond, but I've not been able to find a root cause or reproduce.
For the external users, I chalked it up to Internet issues, but there were reports from internal users who never leave the local network structure.
We've checked logs from firewall, switch, abyss, event log, etc., and found nothing that seemed to apply. So far, the ONLY thing I've found is one instance where one log record appears out-of-order, but a quick look at application log showed the longest transaction was 2.25 seconds. Couldn't find anything else that would have sucked up resources (like virus scan, etc.)
I've sanitized the weird log records below.
67.01.02.003 - - [14/Mar/2023:21:51:41 -0400] "GET /cgi-bin/app.cgi?sys=999.system HTTP/2.0" 200 177773 "
http://www.ourdomain.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36"
((48 other events: mixed static and cgi requests))
66.111.22.333 - - [14/Mar/2023:21:52:00 -0400] "GET /.well-known/traffic-advice HTTP/1.1" 302 5 "" "Chrome Privacy Preserving Prefetch Proxy"
67.01.02.003 - - [14/Mar/2023:21:51:42 -0400] "GET /cgi-bin/app.cgi?sys=999.system HTTP/2.0" 200 177773 "
http://www.ourdomain.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36"