httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Nick Kew <n...@webthing.com>
Subject Re: [users@httpd] need help fighting DoS attack on Apache
Date Sun, 28 May 2006 19:22:44 GMT
On Sunday 28 May 2006 19:23, Sergey Tsalkov wrote:

> This is very wrong. I can't figure out why Apache doesn't have any
> defense against such an obvious attack -- even the connection limiting
> modules can't help because they have no way of knowing that all the
> requests are coming from the same IP.

Which ones have you tried?  And are you by any chance using
the prefork MPM to maximise the cost to you of each connection?

Apache 2.2 on some platforms uses connection filters to defend
against precisely this kind of attack.

-- 
Nick Kew

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message