Yes, this is equivalent to a DOS but the problem is that you may be the
only site that has the file of interest. So, do we fail the jobs or let
them on? There are two mitigations. The one you are already using is the
throttle plugin. The other is using the acceptable share of requests.

Set the percentage of requests your AAA site is willing to serve (the
default is 100%). See

https://xrootd.slac.stanford.edu/doc/dev54/cms_config.htm#_Toc53611076

Note that this will not be effective if your site is the only site that
has the file of interest. In that case, further throttle restrictions
would be advised.

Andy

On Wed, 23 Nov 2022, Geonmo Ryu wrote:

> <img width="942" alt="dcache_ddos4" src="https://user-images.githubusercontent.com/4969463/203679517-7a144419-1dfa-4a7c-b9e0-5668d6967a98.png">
> I think this kind of request is almost a DDOS attack.
>
> --
> Reply to this email directly or view it on GitHub:
> https://github.com/xrootd/xrootd/issues/1832#issuecomment-1325863718
> You are receiving this because you are subscribed to this thread.
>
> Message ID: ***@***.***>

—
Reply to this email directly, view it on GitHub, or unsubscribe.
You are receiving this because you are subscribed to this thread.

[ { "@context": "http://schema.org", "@type": "EmailMessage", "potentialAction": { "@type": "ViewAction", "target": "https://github.com/xrootd/xrootd/issues/1832#issuecomment-1328001366", "url": "https://github.com/xrootd/xrootd/issues/1832#issuecomment-1328001366", "name": "View Issue" }, "description": "View this Issue on GitHub", "publisher": { "@type": "Organization", "name": "GitHub", "url": "https://github.com" } } ]

Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1