httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jim Roland" <jrol...@roland.net>
Subject Re: Per-IP Rate Limiting?
Date Tue, 20 Aug 2002 07:45:45 GMT
Sounds like someone is "hotlinking" to files on your server.  I administer a
medium sized ISP's network, and this occurs quite frequently with our larger
bandwidth customers.  I suggest using .htaccess files with Rewrite rules to
deny REFERERS that come from outside the server for these types of files
(images, sound or motion files, if you have them embedded).




----- Original Message -----
From: "Jason McCormick" <jmlists@lexi.com>
To: <users@httpd.apache.org>
Sent: Monday, August 19, 2002 8:22 AM
Subject: Per-IP Rate Limiting?


> Hello,
>
>   I've been doing some research on some rate limiting modules for Apache
> and I haven't found something that meets my needs and I was wondering if
> someone could help me.  We sometimes receive large "floods" of the same
> request over and over from certain clients.  What happens is that all of
> these simultaneous connections spawn quickly up to my MaxClients (which
> is set to 250) setting an deny access from other users.  Increasing
> MaxClients will not work because the connections will just spawn until
> they're all full.
>
>   What I'm looking for is a module that would limit connection threads
> on a per-IP basis.  I.e. if 10.0.0.1 requests 15 simultaneous objects
> from the server and if the max is set to 15, the 16th request is blocked
> until one of the other 15 threads is done serving up data.  Does
> something like this exist for Apache or is there another way that I'm
> not familiar with for Apache that would prevent these floods from
> spiraling out of control?  I'm currently on 1.3.26.
>
> Thanks
> --
> Jason McCormick
> Network/Systems Administrator
> Lexi-Comp, Inc.
> Phone: 330-650-6506 x239
> Fax: 330-656-4307
> Email: jason.mccormick@lexi.com
>
> Public Key: http://bamboo.lexi.com/~jmccormick/public-keys.php
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message