Apache DoS - is Varnish affected?

Poul-Henning Kamp phk at phk.freebsd.dk
Fri Jun 19 19:09:14 CEST 2009


In message <4A3BBFE6.7070804 at stillbilde.net>, "Svein Skogen (listmail account)" writes:

>> Systems using "http accept filters" (FreeBSD possibly others) the Varnish
>> (or apache) will never even see these connections in the first place.
>
>Does this basically mean that in these uncertain times where kiddiots
>DoS (Destroying our Sanity) just for the fun of it, using accf_http
>should go into the checklist for every webserver, or am I reading this
>wrong?

Good question, I don't know how accf_http will handle these attacks.

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk at FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.



More information about the varnish-misc mailing list