httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Nick Kew <>
Subject Re: [PATCH] Apache 2.2.x: Implicit creation of new proxy_workers
Date Mon, 10 Sep 2007 09:28:45 GMT
On Tue, 4 Sep 2007 14:19:23 +0200
Axel-St├ęphane  SMORGRAV <> wrote:

> I will create a Bugzilla report for this issue.

That'll be PR#43308, in which you wrote:

> In Apache 2.2.x a worker, and the associated backend connection pool,
> is created for each ProxyPass directive. In that case the backend
> connections will by default be persistent (reusable).

> (chop - RewriteRule [P])

> I therefore suggest to modify ap_proxy_pre_request() in order to
> create new workers as needed in the event of requests that do not
> match an existing worker.

Does this open the way to a DoS?  If a rewriterule[P] enables backends
to be derived from the request URI, then you're creating unlimited
numbers of workers, which may never be used.  Where are the limits
on that?

Nick Kew

Application Development with Apache - the Apache Modules Book

View raw message