Mailing-List: contact modules-dev-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: modules-dev@httpd.apache.org
Received-SPF: neutral (athena.apache.org: 76.96.30.32 is neither permitted nor
 denied by domain of jim@jagunet.com)
Content-Type: text/plain; charset=iso-8859-1
Mime-Version: 1.0 (Apple Message framework v1081)
Subject: Re: Shared memory ?
From: Jim Jagielski <jim@jaguNET.com>
In-Reply-To: <f82c2079743f1de3010d9a0ee1d8699c@hyperthese.net>
Date: Mon, 15 Nov 2010 13:50:08 -0500
Content-Transfer-Encoding: quoted-printable
Message-Id: <15A5E8E3-8ED8-43D4-A5E1-2D3A232D6DCF@jaguNET.com>
References: <f82c2079743f1de3010d9a0ee1d8699c@hyperthese.net>
To: modules-dev@httpd.apache.org

With 2.3/trunk you have mod_socache and/or mod_slotmem (with shared =
memory).

socache implements a shared memory based expiring cache and slotmem
is a scoreboard-like shared memory impl.

On Nov 15, 2010, at 11:12 AM, R=E9my Sanchez wrote:

>=20
> Hi,
>=20
> I'm coding a module to somehow replace/complement mod_security (it's =
more a proof of concept than a real project for now). The first thing =
that I'd like to have is a DNSBL, so that detected intruders are =
instantly banned when added to the blacklist. Because doing a DNS query =
for each HTTP request might be a bit heavy, I'd like to keep the results =
in cache.
>=20
> I guess that if I create something from the config pool, it will be =
duplicated between processes. But another security I want is to check =
URL against regexps commonly used by botnets/script kiddies. Then, if an =
IP is blacklisted, I want its state to be changed instantly in all =
caches. Which, if data is duplicated, is not possible. Would there be a =
simple way to achieve this ? Or would it be more clever to move to =
another solution, like using a common redis datastore for =
blacklist/whitelist/rules lookup ?
>=20
> Thanks,
> R=E9my
>=20