Scenario: We have a shared hosting solution (DirectAdmin, if important to know) with 30-40 clients per server. Every now and then one of the clients gets loads of traffic due to advertisements or of any other reason.
We need a way to fast and efficiently find this client so that we can Suspend or move it over to another server, to not let all the other clients on the same server "hang" due to the fact that all resources (CPU etc) gets overloaded.
We have thought of writing a small script that checks which Apache logfiles are growing fastest, using the META information on the files, and then assume which client that needs to be blocked.
Are there any ready-made solution for this? Or does anyone have any better solution?
We are using pfSense as firewall, and so if we could track them down there that would be even better.