You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Jason McCormick <jm...@lexi.com> on 2002/08/19 15:22:22 UTC
Per-IP Rate Limiting?
Hello,
I've been doing some research on some rate limiting modules for Apache
and I haven't found something that meets my needs and I was wondering if
someone could help me. We sometimes receive large "floods" of the same
request over and over from certain clients. What happens is that all of
these simultaneous connections spawn quickly up to my MaxClients (which
is set to 250) setting an deny access from other users. Increasing
MaxClients will not work because the connections will just spawn until
they're all full.
What I'm looking for is a module that would limit connection threads
on a per-IP basis. I.e. if 10.0.0.1 requests 15 simultaneous objects
from the server and if the max is set to 15, the 16th request is blocked
until one of the other 15 threads is done serving up data. Does
something like this exist for Apache or is there another way that I'm
not familiar with for Apache that would prevent these floods from
spiraling out of control? I'm currently on 1.3.26.
Thanks
--
Jason McCormick
Network/Systems Administrator
Lexi-Comp, Inc.
Phone: 330-650-6506 x239
Fax: 330-656-4307
Email: jason.mccormick@lexi.com
Public Key: http://bamboo.lexi.com/~jmccormick/public-keys.php
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: Per-IP Rate Limiting?
Posted by Jim Roland <jr...@roland.net>.
Sounds like someone is "hotlinking" to files on your server. I administer a
medium sized ISP's network, and this occurs quite frequently with our larger
bandwidth customers. I suggest using .htaccess files with Rewrite rules to
deny REFERERS that come from outside the server for these types of files
(images, sound or motion files, if you have them embedded).
----- Original Message -----
From: "Jason McCormick" <jm...@lexi.com>
To: <us...@httpd.apache.org>
Sent: Monday, August 19, 2002 8:22 AM
Subject: Per-IP Rate Limiting?
> Hello,
>
> I've been doing some research on some rate limiting modules for Apache
> and I haven't found something that meets my needs and I was wondering if
> someone could help me. We sometimes receive large "floods" of the same
> request over and over from certain clients. What happens is that all of
> these simultaneous connections spawn quickly up to my MaxClients (which
> is set to 250) setting an deny access from other users. Increasing
> MaxClients will not work because the connections will just spawn until
> they're all full.
>
> What I'm looking for is a module that would limit connection threads
> on a per-IP basis. I.e. if 10.0.0.1 requests 15 simultaneous objects
> from the server and if the max is set to 15, the 16th request is blocked
> until one of the other 15 threads is done serving up data. Does
> something like this exist for Apache or is there another way that I'm
> not familiar with for Apache that would prevent these floods from
> spiraling out of control? I'm currently on 1.3.26.
>
> Thanks
> --
> Jason McCormick
> Network/Systems Administrator
> Lexi-Comp, Inc.
> Phone: 330-650-6506 x239
> Fax: 330-656-4307
> Email: jason.mccormick@lexi.com
>
> Public Key: http://bamboo.lexi.com/~jmccormick/public-keys.php
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org