{"action":"created","issue":{"url":"https://api.github.com/repos/seatgeek/sixpack/issues/246","repository_url":"https://api.github.com/repos/seatgeek/sixpack","labels_url":"https://api.github.com/repos/seatgeek/sixpack/issues/246/labels{/name}","comments_url":"https://api.github.com/repos/seatgeek/sixpack/issues/246/comments","events_url":"https://api.github.com/repos/seatgeek/sixpack/issues/246/events","html_url":"https://github.com/seatgeek/sixpack/issues/246","id":169833727,"number":246,"title":"redis keys explosion of sixpack","user":{"login":"SimpleExpress","id":1047330,"avatar_url":"https://avatars.githubusercontent.com/u/1047330?v=3","gravatar_id":"","url":"https://api.github.com/users/SimpleExpress","html_url":"https://github.com/SimpleExpress","followers_url":"https://api.github.com/users/SimpleExpress/followers","following_url":"https://api.github.com/users/SimpleExpress/following{/other_user}","gists_url":"https://api.github.com/users/SimpleExpress/gists{/gist_id}","starred_url":"https://api.github.com/users/SimpleExpress/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/SimpleExpress/subscriptions","organizations_url":"https://api.github.com/users/SimpleExpress/orgs","repos_url":"https://api.github.com/users/SimpleExpress/repos","events_url":"https://api.github.com/users/SimpleExpress/events{/privacy}","received_events_url":"https://api.github.com/users/SimpleExpress/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-08-08T02:45:50Z","updated_at":"2016-08-08T09:13:51Z","closed_at":null,"body":"I deployed sixpack 2.3.1 in production, and started it using supervisor with the configurations:\r\n```\r\n[program:sixpack]\r\ncommand=gunicorn --access-logfile - -w 8 -k gevent -b 0.0.0.0:5000 sixpack.server:start\r\nautorestart=true\r\nenvironment=SIXPACK_CONFIG=\"/etc/sixpack/config.yml\"\r\nstdout_logfile=/var/log/sixpack/sixpack-server.log\r\nredirect_stderr=true\r\n\r\n[program:sixpack-web]\r\ncommand=sixpack-web\r\nautorestart=true\r\nenvironment=SIXPACK_CONFIG=\"/etc/sixpack/config.yml\"\r\nstdout_logfile=/var/log/sixpack/sixpack-web.log\r\nredirect_stderr=true\r\n```\r\n\r\nI finished the deployment at last Friday and it worked well. But when I opened the web page today (Monday) I just found the page hanged. I tried to find what have happened and found out that the redis had keys explosion which was used by sixpack:\r\n```\r\n# Keyspace\r\ndb15:keys=9628,expires=0,avg_ttl=0\r\n```\r\n\r\nsome keys I found in redis (by typing keys *)\r\n```\r\n9625) \"sxp:p:almark_test UNION ALL SELECT CONCAT(0x6b5350654d70,0x43786d484968),CONCAT(0x6b5350654d70,0x43786d484968),CONCAT(0x6b5350654d70,0x43786d484968),CONCAT(0x6b5350654d70,0x43786d484968)#:_all:2016\"\r\n9626) \"sxp:p:-1869') UNION ALL SELECT CONCAT(0x4b475367494b,0x5659704c4f43),CONCAT(0x4b475367494b,0x5659704c4f43),CONCAT(0x4b475367494b,0x5659704c4f43),CONCAT(0x4b475367494b,0x5659704c4f43),CONCAT(0x4b475367494b,0x5659704c4f43),CONCAT(0x4b475367494b,0x5659704c4f43),CONCAT(0x4b475367494b,0x5659704c4f43),CONCAT(0x4b475367494b,0x5659704c4f43),CONCAT(0x4b475367494b,0x5659704c4f43),CONCAT(0x4b475367494b,0x5659704c4f43),CONCAT(0x4b475367494b,0x5659704c4f43),CONCAT(0x4b475367494b,0x5659704c4f43),CONCAT(0x4b475367494b,0x5659704c4f43),CONCAT(0x4b475367494b,0x5659704c4f43),CONCAT(0x4b475367494b,0x5659704c4f43)-- :_all:2016-08-06\"\r\n9627) \"sxp:p:almark_test UNION ALL SELECT CONCAT(0x6b5350654d70,0x43786d484968),CONCAT(0x6b5350654d70,0x43786d484968),CONCAT(0x6b5350654d70,0x43786d484968),CONCAT(0x6b5350654d70,0x43786d484968),CONCAT(0x6b5350654d70,0x43786d484968),CONCAT(0x6b5350654d70,0x43786d484968),CONCAT(0x6b5350654d70,0x43786d484968),CONCAT(0x6b5350654d70,0x43786d484968),CONCAT(0x6b5350654d70,0x43786d484968),CONCAT(0x6b5350654d70,0x43786d484968)#:_all:2016-08\"\r\n9628) \"sxp:p:-1891 UNION ALL SELECT CONCAT(0x4c5569786f48,0x797865706b71),CONCAT(0x4c5569786f48,0x797865706b71)-- :warm:2016-08\"\r\n(4.95s)\r\n```\r\n\r\nSince we haven't send any real data to sixpack, it should only contains the data (about 10+ keys) that I used for testing (the almark_test experiment). Can you help to figure out what had happened, and how can I fix this issue. Thanks a lot."},"comment":{"url":"https://api.github.com/repos/seatgeek/sixpack/issues/comments/238182756","html_url":"https://github.com/seatgeek/sixpack/issues/246#issuecomment-238182756","issue_url":"https://api.github.com/repos/seatgeek/sixpack/issues/246","id":238182756,"user":{"login":"SimpleExpress","id":1047330,"avatar_url":"https://avatars.githubusercontent.com/u/1047330?v=3","gravatar_id":"","url":"https://api.github.com/users/SimpleExpress","html_url":"https://github.com/SimpleExpress","followers_url":"https://api.github.com/users/SimpleExpress/followers","following_url":"https://api.github.com/users/SimpleExpress/following{/other_user}","gists_url":"https://api.github.com/users/SimpleExpress/gists{/gist_id}","starred_url":"https://api.github.com/users/SimpleExpress/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/SimpleExpress/subscriptions","organizations_url":"https://api.github.com/users/SimpleExpress/orgs","repos_url":"https://api.github.com/users/SimpleExpress/repos","events_url":"https://api.github.com/users/SimpleExpress/events{/privacy}","received_events_url":"https://api.github.com/users/SimpleExpress/received_events","type":"User","site_admin":false},"created_at":"2016-08-08T09:13:51Z","updated_at":"2016-08-08T09:13:51Z","body":"I tried to investigate it and found it was actually an attack. I do appreciate if someone could give some suggestions for the enhancement work."}}
{"actor":{"display_login":"SimpleExpress"}}