Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
MIME-Version: 1.0
In-Reply-To: <5.2.1.1.2.20161205114642.046ab958@localhost>
References: <CALhNj+SuuOzjGRqnONMEGP41jUeKO2qFanjQA1x1Gy2mwXYEWA@mail.gmail.com>
 <85308eaf-86b6-cd15-8a9c-2bfdcb81f46c@npulse.net> <5.2.1.1.2.20161205114642.046ab958@localhost>
From: Rich Bowen <rbowen@rcbowen.com>
Date: Mon, 9 Jan 2017 06:46:19 -0500
Message-ID: <CAD6VreuM4COa5ZZ1CvcCKsn+cDtp9073AS3uHY0zTuPCL4yKcg@mail.gmail.com>
To: users@httpd.apache.org
Content-Type: multipart/alternative; boundary=001a114e65069542e20545a7ea6b
Subject: Re: [users@httpd] ** MOD_RELEASE ** Apache2.x (mod_fence)
 Flood/DOS/DDOS Protection + stuck detection
archived-at: Mon, 09 Jan 2017 11:46:26 -0000

--001a114e65069542e20545a7ea6b
Content-Type: text/plain; charset=UTF-8

Being under the apache license does not imply any relationship with the
Apache Software Foundation. And in the case of mod_evasive there is none.
As far as I can tell, that module has been abandoned for a number of years.

On Dec 5, 2016 11:52 AM, "Stormy" <stormy22@stormy.ca> wrote:

> At 04:26 PM 12/5/2016 +0100, DaVieS wrote:
>
>> Hi Everyone!
>>
>> As a FullStack I had a very long headache with Apache, especially with
>> crappy and slowly pages, that the PHP stucks (FLOCK() && Session) the
>> processes over-time until the webserver become unavailable meanwhile
>> unfortunately slow pages (1-4 secs) will able to kill the whole webserver
>> with hammering F5 or with external help (with mod_evasive On and/or nginx
>> rate limiting).
>>
>
> On 3 November I posted a question about mod_evasive and here's another
> one. Could someone involved with Apache "background" please advise (on- or
> off-list) if such mods, distributed under the Apache license, have gone
> through any form of QA?
>
> tnx -- paul
>
>
> In the case described before we made a module that only mitigate requests
>> when unfinished jobs remaining in apache and its stopped my headache as
>> well and it is available for public,
>> "Licensed under the Apache License, Version 2.0".
>>
>>
>> (Links below does not contains any advertising)
>>
>> If you are interesting how is it works please visit:
>> https://web-flood-test.npulse.net/
>> If you are interested for source: https://devel.npulse.net/npuls
>> e-public/mod_fence
>> If you are interested for our article about the problem:
>> https://npulse.net/en/apache-php-stuck-session-bug-mod_fence
>> -protection-dos-ddos-protection
>>
>> Feel free to test / use / share and also pull requests are welcome.
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>> For additional commands, e-mail: users-help@httpd.apache.org
>>
>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>

--001a114e65069542e20545a7ea6b
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto">Being under the apache license does not imply any relatio=
nship with the Apache Software Foundation. And in the case of mod_evasive t=
here is none. As far as I can tell, that module has been abandoned for a nu=
mber of years.=C2=A0</div><div class=3D"gmail_extra"><br><div class=3D"gmai=
l_quote">On Dec 5, 2016 11:52 AM, &quot;Stormy&quot; &lt;<a href=3D"mailto:=
stormy22@stormy.ca">stormy22@stormy.ca</a>&gt; wrote:<br type=3D"attributio=
n"><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left=
:1px #ccc solid;padding-left:1ex">At 04:26 PM 12/5/2016 +0100, DaVieS wrote=
:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
Hi Everyone!<br>
<br>
As a FullStack I had a very long headache with Apache, especially with crap=
py and slowly pages, that the PHP stucks (FLOCK() &amp;&amp; Session) the p=
rocesses over-time until the webserver become unavailable meanwhile unfortu=
nately slow pages (1-4 secs) will able to kill the whole webserver with ham=
mering F5 or with external help (with mod_evasive On and/or nginx rate limi=
ting).<br>
</blockquote>
<br>
On 3 November I posted a question about mod_evasive and here&#39;s another =
one. Could someone involved with Apache &quot;background&quot; please advis=
e (on- or off-list) if such mods, distributed under the Apache license, hav=
e gone through any form of QA?<br>
<br>
tnx -- paul<br>
<br>
<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
In the case described before we made a module that only mitigate requests w=
hen unfinished jobs remaining in apache and its stopped my headache as well=
 and it is available for public,<br>
&quot;Licensed under the Apache License, Version 2.0&quot;.<br>
<br>
<br>
(Links below does not contains any advertising)<br>
<br>
If you are interesting how is it works please visit: <a href=3D"https://web=
-flood-test.npulse.net/" rel=3D"noreferrer" target=3D"_blank">https://web-f=
lood-test.npulse.<wbr>net/</a><br>
If you are interested for source: <a href=3D"https://devel.npulse.net/npuls=
e-public/mod_fence" rel=3D"noreferrer" target=3D"_blank">https://devel.npul=
se.net/npuls<wbr>e-public/mod_fence</a><br>
If you are interested for our article about the problem: <a href=3D"https:/=
/npulse.net/en/apache-php-stuck-session-bug-mod_fence-protection-dos-ddos-p=
rotection" rel=3D"noreferrer" target=3D"_blank">https://npulse.net/en/apach=
e-p<wbr>hp-stuck-session-bug-mod_fence<wbr>-protection-dos-ddos-protectio<w=
br>n</a><br>
<br>
Feel free to test / use / share and also pull requests are welcome.<br>
<br>
------------------------------<wbr>------------------------------<wbr>-----=
----<br>
To unsubscribe, e-mail: <a href=3D"mailto:users-unsubscribe@httpd.apache.or=
g" target=3D"_blank">users-unsubscribe@httpd.apache<wbr>.org</a><br>
For additional commands, e-mail: <a href=3D"mailto:users-help@httpd.apache.=
org" target=3D"_blank">users-help@httpd.apache.org</a><br>
<br>
<br>
</blockquote>
<br>
<br>
------------------------------<wbr>------------------------------<wbr>-----=
----<br>
To unsubscribe, e-mail: <a href=3D"mailto:users-unsubscribe@httpd.apache.or=
g" target=3D"_blank">users-unsubscribe@httpd.apache<wbr>.org</a><br>
For additional commands, e-mail: <a href=3D"mailto:users-help@httpd.apache.=
org" target=3D"_blank">users-help@httpd.apache.org</a><br>
<br>
</blockquote></div></div>

--001a114e65069542e20545a7ea6b--