Return-Path: Delivered-To: apmail-httpd-dev-archive@www.apache.org Received: (qmail 62566 invoked from network); 21 Jun 2010 21:38:07 -0000 Received: from unknown (HELO mail.apache.org) (140.211.11.3) by 140.211.11.9 with SMTP; 21 Jun 2010 21:38:07 -0000 Received: (qmail 14926 invoked by uid 500); 21 Jun 2010 21:38:07 -0000 Delivered-To: apmail-httpd-dev-archive@httpd.apache.org Received: (qmail 14725 invoked by uid 500); 21 Jun 2010 21:38:06 -0000 Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: dev@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list dev@httpd.apache.org Received: (qmail 14717 invoked by uid 99); 21 Jun 2010 21:38:06 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 21 Jun 2010 21:38:06 +0000 X-ASF-Spam-Status: No, hits=0.7 required=10.0 tests=RCVD_IN_DNSWL_NONE,SPF_NEUTRAL X-Spam-Check-By: apache.org Received-SPF: neutral (nike.apache.org: local policy) Received: from [64.202.165.47] (HELO smtpauth23.prod.mesa1.secureserver.net) (64.202.165.47) by apache.org (qpsmtpd/0.29) with SMTP; Mon, 21 Jun 2010 21:37:57 +0000 Received: (qmail 31403 invoked from network); 21 Jun 2010 21:37:34 -0000 Received: from unknown (76.252.112.72) by smtpauth23.prod.mesa1.secureserver.net (64.202.165.47) with ESMTP; 21 Jun 2010 21:37:34 -0000 Message-ID: <4C1FDB9C.4010202@rowe-clan.net> Date: Mon, 21 Jun 2010 16:37:32 -0500 From: "William A. Rowe Jr." User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.10) Gecko/20100512 Lightning/1.0b1 Thunderbird/3.0.5 MIME-Version: 1.0 To: dev@httpd.apache.org Subject: Re: mod_deflate DoS using HEAD References: <20090713215616.c9d58897.takashi@lans-tv.com> <99EA83DCDE961346AFA9B5EC33FEC08B02723D0C@VF-MBX11.internal.vodafone.com> <4A5F4423.8070305@rowe-clan.net> <201006212300.03446.sf@sfritsch.de> In-Reply-To: <201006212300.03446.sf@sfritsch.de> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Virus-Checked: Checked by ClamAV on apache.org On 6/21/2010 4:00 PM, Stefan Fritsch wrote: > > As I understand it, Rüdiger's patch may be better for caching but uses > more CPU cycles. But it uses way less CPU than no patch at all. > Therefore I propose to include that patch unless there is clear > consensus that Eric's patch is to be preferred. Not a significant number, and Rüdiger's patch gathered +1's from myself, gregames, nick is on the wall with a +.5 - I think your question is to Rüdiger, with the emphasis on 'what is your decision?' based on this last rather indecisive posting. On 7/16/2009 9:24 AM, "Plüm, Rüdiger, VF-Group" wrote: >> >> For a large static file, Ruedigers patch suppresses the C-L entirely >> (it gets added back in down the chain for my patch, for static files >> at least) which I thought would make that prefered, if we're confident >> that we'll never do more than a zlib buffer worth of work the first >> go-round. > > Good point. So your patch would invalidate a cached entity if the > response to a GET delivered a C-L header, since HEAD and GET would > deliver different C-L headers. > OTOH I think only very small or extremely compressable responses (whether > static or not) would have a C-L in the response to a GET, because everything > that exceeeds a zlib buffer would be delivered chunked anyway.