You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Akash Jain <ak...@gmail.com> on 2013/09/02 12:36:09 UTC
[users@httpd] Rate limiting
How can i rate limit no. Of requests per ip for a particular url to prevent
DoS?
Re: [users@httpd] Rate limiting
Posted by Mihamina Rakotomandimby <mi...@rktmb.org>.
On 2013-09-02 20:15, Geoff Millikan wrote:
> Since this is a common request I'd love to see someone put together a "best practices, solutions and examples" post for the community.
DOS treatment is IMHO the same as for SPAM and Viruses: there should not
be a common way to do it, as far as bad guys will ever find a find to
counter it.
But OTOH, there are several basis and common tools to achieve it.
--
RMA.
RE: [users@httpd] Rate limiting
Posted by Geoff Millikan <gm...@t1shopper.com>.
Since this is a common request I'd love to see someone put together a "best practices, solutions and examples" post for the community.
> I would recommend managing it at network level, with iptables for example
Agreed, and while it's off topic for this list take a look at "iptables hashlimit." We've been looking at it but remember it's just one tool of several needed to mitigate a DOS.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Rate limiting
Posted by Mihamina Rakotomandimby <mi...@rktmb.org>.
On 2013-09-02 13:36, Akash Jain wrote:
>
> How can i rate limit no. Of requests per ip for a particular url to
> prevent DoS?
>
I would recommend managing it at network level, with iptables for example.
--
RMA.
Re: [users@httpd] Rate limiting
Posted by Tom Evans <te...@googlemail.com>.
On Mon, Sep 2, 2013 at 2:17 PM, John Doe <jd...@yahoo.com> wrote:
> From: Akash Jain <ak...@gmail.com>
>
>> How can i rate limit no. Of requests per ip for a particular url to prevent DoS?
>
> https://www.google.fr/search?q=apache+rate+limit+per+ip
>
> if only it was that easy...
>
> DoS attacks use thousands of IPs.
>
That would be a DDoS. A DoS involving just a single user would be
something along the lines of slowloris.
Cheers
Tom
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Rate limiting
Posted by John Doe <jd...@yahoo.com>.
From: Akash Jain <ak...@gmail.com>
> How can i rate limit no. Of requests per ip for a particular url to prevent DoS?
https://www.google.fr/search?q=apache+rate+limit+per+ip
if only it was that easy...
DoS attacks use thousands of IPs.
JD
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org