Page was served from Nginx on ReactOS(reactos.aaron.cc) |
Page was served from Nginx on ReactOS(reactos.aaron.cc) |
Try this: http://reactos.aaron.cc/
There must be quite a few hits on your website when HN links it. nginx out of the box can handle quite a lot of connections, assuming that it isn't trying serve something too complicated on each one.
HN itself runs on one average sized server. This looks like a blog serving static content which should never go down if you put something like CF in front of it.
It's capable of incapacitating any sort of system without load balancing as soon as that system is linked from the front of Hacker News.
I think this is what happened:
I experimented with HTTPS on Sunday and actually got it up and running by patching msafd.dll (see https://jira.reactos.org/browse/CORE-14486 and https://github.com/reactos/reactos/pull/4086).
While the page was running on HTTPS, @timeoperator must have posted this (without me realizing it). Shortly after, the site was down due to the HN Hug of Death®. However, at the time, I thought it had something to do with my recent HTTPS change, so I rolled it back. As a result, the HTTPS link posted here stopped working.
In addition, I wanted to be smart and added a Strict-Transport-Security header:
add_header Strict-Transport-Security 'max-age=31536000; includeSubDomains; preload' always;
I didn’t expect it to get so much attention, so next time I attempt something like this, I’ll perform proper load tests, have a dev deployment in place, and check access logs more often!
https://web.archive.org/web/20220811232234/https://reactos.a...
$ curl -v http://reactos.aaron.cc/
* Trying 136.244.80.24:80...
* Connected to reactos.aaron.cc (136.244.80.24) port 80 (#0)
> GET / HTTP/1.1
> Host: reactos.aaron.cc
> User-Agent: curl/7.79.1
> Accept: */*
>
Why can't people put a little effort and host those pages on their hardware/software of choice but at least put them behind some CDN (at least for static resources)?
Part of the challenge for me was to avoid any proxies and and have all requests go directly to the ReactOS system.
I’m totally aware that this doesn’t make any sense in a real-world scenario.
Try this, and it’ll work: http://reactos.aaron.cc/
Then somebody posts a link, which, against all odds, gets enough upvotes, et voilà, their hardware is melting under the load
ReactOS is cool, but like any other hobby OS, it's not cool before it escapes the VM and works on real hw.
Here's the screenshot of the full page: https://i.imgur.com/sqTTF7X.png
Probably doesn't have a letsencrypt client.
Maybe there's no SSL/TLS library that works on it at all.
> Probably doesn't have a letsencrypt client.
Right, Certbot doesn’t work because of an issue with Python, however, it’s easy to generate the certificates elsewhere and inject them into the virtual machine.
> Maybe there's no SSL/TLS library that works on it at all.
There is, but the OS needs to be patched to fix a socket issue (see https://github.com/reactos/reactos/pull/4086 which was never merged because of side effects). The patch does seem to work for my use case and I had actually the site running on HTTPS, but a few hours later it become unresponsive. I didn’t realize that this was probably just due to the HN DOS. I will give HTTPS another shot later today.
Since then it has been reappropriated widely on HN and Imgur and any place where people gather and unwittingly cause a denial of service with the best of intentions.
I have to say, it is quite fun watching words, phrases and ideas being made up on the fly at a prolific rate these days. I can still remember reading about memes in a Richard Dawkins book and a few years later the concept was coerced wholesale by the internets. I still remember thinking "what the fuck is a roflcopter" and then suddenly achieving enlightenment. My granddaughters were born with thumbs that can doom scroll.
Nowadays are properly weird and will continue to get weirder. Despite that it will also continue to be normal.
You and I both! It's fascinating.
Dare i say, a cDoS
Probably around then time when reddit really started to take off, so I'd guess early 2010s.
