DDOS

[Stig Bakken]

On Wed, Feb 16, 2011 at 9:37 PM, alexus <alexus at gmail.com> wrote:

> How does Varnish handles DDOS?
>
> here is my problem, in our environment varnish servers static pages
> but dynamic pages it passed to application server (apache).
> so every onces in a while we have some attacker(s) who start doing
> some sort of attacks against us, and apache hits very high load on
> server and about to go down...
> so I look up an IP address and I block it on Varnish .vcl file, and
> load goes back to normal right away...
> is there something that can be done automatically? or is there
> anything can be done at all to somehow handle this type of issue?
>
> please advise


Usually you would handle this in your firewall.  Varnish is a fine hammer,
but for some things screwdrivers still rule.
(Btw, if blocking IP addresses does the trick for you, it's just a DOS, not
a DDOS.)

 - Stig



-- 
Stig Bakken
CTO, Zedge.net - free your phone!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.varnish-cache.org/lists/pipermail/varnish-misc/attachments/20110216/5ed54592/attachment.html>