<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>Indeed. I forgot to consider that. But I don’t think the problem is the volume of users. Shell sessions don’t cost many resources. We could also implement an autokiller which kills everything related to the user if it uses more than allowed. <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>Cyberpower678<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>English Wikipedia Account Creation Team<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>Mailing List Moderator<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>Global User Renamer<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>From:</span></b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'> Labs-l [mailto:labs-l-bounces@lists.wikimedia.org] <b>On Behalf Of </b>John<br><b>Sent:</b> Monday, April 04, 2016 4:02 PM<br><b>To:</b> Wikimedia Labs <labs-l@lists.wikimedia.org><br><b>Subject:</b> Re: [Labs-l] [Tools] New bastion at tools-login.wmflabs.org<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>Killing shells is a bad idea, Often Ill login and run a sql query which might take 15-20 minutes to run and do something else in the meantime. Having to login/reconnect between queries is obnoxious. (Mysql handles this nicely by auto-reconnecting but with a SSH shell its a different story. <br><br>Honestly I think the best idea is find out who is utilizing resources beyond reason, call it out and have them stop. If they fail to get the message disable access. If it is just an issue of the volume of users, get a multi-host with load balancing.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>On Mon, Apr 4, 2016 at 3:54 PM, Maximilian Doerr <<a href="mailto:maximilian.doerr@gmail.com" target="_blank">maximilian.doerr@gmail.com</a>> wrote:<o:p></o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal>I think the primary problem is that users keep running bot scripts on it, when they shouldn't, and I think the easy solution would be to implement a killer, which kills all scripts started on tools-login when the user logs off, or if it has been running for more than 15 minutes. It's okay to run it on -login quickly to understand how it will interact with the labs environment, but it's not supposed to be permanent. Another seemingly recurring problem, and I'm guilty of it too is when users pointlessly leave shell sessions open. That's also a security risk, and a shell should automatically terminate on labs, if it's been inactive for 30 mintues.<br><br>Just my thoughts.<br><br>Cyberpower678<br>English Wikipedia Account Creation Team<br>Mailing List Moderator<br>Global User Renamer<o:p></o:p></p><div><div><p class=MsoNormal><br>-----Original Message-----<br>From: Labs-l [mailto:<a href="mailto:labs-l-bounces@lists.wikimedia.org">labs-l-bounces@lists.wikimedia.org</a>] On Behalf Of Yuvi Panda<br>Sent: Monday, April 04, 2016 3:43 PM<br>To: Wikimedia Labs <<a href="mailto:labs-l@lists.wikimedia.org">labs-l@lists.wikimedia.org</a>><br>Subject: [Labs-l] [Tools] New bastion at <a href="http://tools-login.wmflabs.org" target="_blank">tools-login.wmflabs.org</a><br><br>Hello!<br><br>I've moved <a href="http://tools-login.wmflabs.org" target="_blank">tools-login.wmflabs.org</a> to a new bastion host with twice the RAM and CPU of the old one. This should hopefully provide a better bandaid against it getting overloaded up. More discussion about a longer term solution at <a href="https://phabricator.wikimedia.org/T131541" target="_blank">https://phabricator.wikimedia.org/T131541</a><br><br>You can find new fingerprints at<br><a href="https://wikitech.wikimedia.org/wiki/Help:SSH_Fingerprints/tools-login.wmflabs.org" target="_blank">https://wikitech.wikimedia.org/wiki/Help:SSH_Fingerprints/tools-login.wmflabs.org</a><br><br>Apologies for the interruption! I'll leave the old bastion up at tools-bastion-05.eqiad.wmflabs.<br><br>--<br>Yuvi Panda T<br><a href="http://yuvi.in/blog" target="_blank">http://yuvi.in/blog</a><br><br>_______________________________________________<br>Labs-l mailing list<br><a href="mailto:Labs-l@lists.wikimedia.org">Labs-l@lists.wikimedia.org</a><br><a href="https://lists.wikimedia.org/mailman/listinfo/labs-l" target="_blank">https://lists.wikimedia.org/mailman/listinfo/labs-l</a><br><br><br>_______________________________________________<br>Labs-l mailing list<br><a href="mailto:Labs-l@lists.wikimedia.org">Labs-l@lists.wikimedia.org</a><br><a href="https://lists.wikimedia.org/mailman/listinfo/labs-l" target="_blank">https://lists.wikimedia.org/mailman/listinfo/labs-l</a><o:p></o:p></p></div></div></blockquote></div><p class=MsoNormal><o:p> </o:p></p></div></div></body></html>