Home › Forums › General
 Database Security. Database Auditing. Database Caching. Database Masking. Get it now

I have some questions about greensql. :-)

Posted October 20th, 2008 by xxyyboy
in

Hi :-)
First, I think It's a good way to protect my mysql db using greensql, wow it's a perfect thing.
I want to know some points aobut greensql:
1.If everything can configured in conf file, It's better.for example ,the greensql bind ip, bind port and..,I hate to use the console.
2.I cann't find how to limit the max works thread, for example: 100 thread are permitted at the same time, if more thread involed into greensql, the thread will be rejected or ....
3.I cann'nt find how to limit the ip list. for example: there is a ip list, only the ip in the list can access the greensql.

what do you think?
thanks for your time :-)
ken

‹ Wordpress install is failed with GreenSQL looking for beta testers ›

Comments

Hello Yuli :-) The second

On October 28th, 2008 xxyyboy says:

Hello Yuli :-)
The second point, you said right.
2. I do not know if I understood this question correctly. If you want to limit number of concurrent request that GreenSQL can serve - currently we do not have this feature.

Because our business is a kind of web service, beyond 50，000，000 customers per day browse our web. so we must protect the database, limit the total number of concurrent request.

You have too many requests

On October 29th, 2008 yuli says:

You have too many requests ;) I am very interesting in getting more information about how you use GreenSQL. This can be great case study for our users.

Regarding your question. We can add this support in GreenSQL. But it will not be that efficient for your case. GreenSQL works in user space. As a result it adds some overheard. A better solution is to use kernel firewall to do this for us. Here is a solution I found on Internet using Linux iptables:

"Let us assume that you need to limit incoming connection to ssh server (port 22) no more than 10 connections in a 10 minute:"
iptables -I INPUT -p tcp -s 0/0 -d $SERVER_IP --sport 513:65535 --dport 22 -m state --state NEW,ESTABLISHED -m recent --set -j ACCEPT
iptables -I INPUT -p tcp --dport 22 -m state --state NEW -m recent --update --seconds 600 --hitcount 11 -j DROP
iptables -A OUTPUT -p tcp -s $SERVER_IP -d 0/0 --sport 22 --dport 513:65535 -m state --state ESTABLISHED -j ACCEPT

Source: http://www.cyberciti.biz/tips/howto-limit-linux-syn-attacks.html

Hope this helps,
Yuli

Using iptalbes, my god,you

On November 6th, 2008 xxyyboy says:

Using iptalbes, my god,you are a talent.

Back to top