httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Nick Kew <n...@webthing.com>
Subject Re: mod_noloris: mitigating against slowloris-style attack
Date Thu, 25 Jun 2009 16:06:39 GMT

On 25 Jun 2009, at 16:12, William A. Rowe, Jr. wrote:

> Nick Kew wrote:
>>
>> Is this worth hacking up, or more trouble than it saves?
>
> It already lives in /repos/asf/httpd/mod_ftp/trunk/modules/ftp/ ...
> see the http://httpd.apache.org/mod_ftp/mod/ 
> mod_ftp.html#ftplimitloginip
> docs.  It would be reasonably simple to rip this out and use a single
> shared implementation for both protocols.

OK, will look.

> An extended scoreboard based solution would be much more efficient,
> I suspect.

How would you keep an index keyed on client-IP using scoreboard?
Or did you have something else in mind?

-- 
Nick Kew

Mime
View raw message