Apache DoS - is Varnish affected?
phk at phk.freebsd.dk
Fri Jun 19 19:09:14 CEST 2009
In message <4A3BBFE6.7070804 at stillbilde.net>, "Svein Skogen (listmail account)" writes:
>> Systems using "http accept filters" (FreeBSD possibly others) the Varnish
>> (or apache) will never even see these connections in the first place.
>Does this basically mean that in these uncertain times where kiddiots
>DoS (Destroying our Sanity) just for the fun of it, using accf_http
>should go into the checklist for every webserver, or am I reading this
Good question, I don't know how accf_http will handle these attacks.
Poul-Henning Kamp | UNIX since Zilog Zeus 3.20
phk at FreeBSD.ORG | TCP/IP since RFC 956
FreeBSD committer | BSD since 4.3-tahoe
Never attribute to malice what can adequately be explained by incompetence.
More information about the varnish-misc