DDOS

[alexus]

right, in this case it was a single IP ... well maybe not single but
not that many to consider that as DDOS...
my question how does Varnish handles this kind or problems at all...

On Wed, Feb 16, 2011 at 5:20 PM, Stig Bakken <stig at zedge.net> wrote:
> On Wed, Feb 16, 2011 at 9:37 PM, alexus <alexus at gmail.com> wrote:
>>
>> How does Varnish handles DDOS?
>>
>> here is my problem, in our environment varnish servers static pages
>> but dynamic pages it passed to application server (apache).
>> so every onces in a while we have some attacker(s) who start doing
>> some sort of attacks against us, and apache hits very high load on
>> server and about to go down...
>> so I look up an IP address and I block it on Varnish .vcl file, and
>> load goes back to normal right away...
>> is there something that can be done automatically? or is there
>> anything can be done at all to somehow handle this type of issue?
>>
>> please advise
>
> Usually you would handle this in your firewall.  Varnish is a fine hammer,
> but for some things screwdrivers still rule.
> (Btw, if blocking IP addresses does the trick for you, it's just a DOS, not
> a DDOS.)
>
>  - Stig
>
> --
> Stig Bakken
> CTO, Zedge.net - free your phone!
>
> _______________________________________________
> varnish-misc mailing list
> varnish-misc at varnish-cache.org
> http://www.varnish-cache.org/lists/mailman/listinfo/varnish-misc
>



-- 
http://alexus.org/