httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Nick Kew <n...@webthing.com>
Subject Re: [PATCH] Apache 2.2.x: Implicit creation of new proxy_workers
Date Mon, 10 Sep 2007 09:28:45 GMT
On Tue, 4 Sep 2007 14:19:23 +0200
Axel-St├ęphane  SMORGRAV <Axel-Stephane.SMORGRAV@europe.adp.com> wrote:

> I will create a Bugzilla report for this issue.

That'll be PR#43308, in which you wrote:

> In Apache 2.2.x a worker, and the associated backend connection pool,
> is created for each ProxyPass directive. In that case the backend
> connections will by default be persistent (reusable).

> (chop - RewriteRule [P])

> I therefore suggest to modify ap_proxy_pre_request() in order to
> create new workers as needed in the event of requests that do not
> match an existing worker.

Does this open the way to a DoS?  If a rewriterule[P] enables backends
to be derived from the request URI, then you're creating unlimited
numbers of workers, which may never be used.  Where are the limits
on that?

-- 
Nick Kew

Application Development with Apache - the Apache Modules Book
http://www.apachetutor.org/

Mime
View raw message