<font size=2 face="sans-serif">As someone else said best to use a firewall,
if you want to use a simple one just run iptables, since this is only DoS
you best to use rate limit connections per IP, depending on the number
of objects etc you should be able to get away with keeping connections
to a fairly low number and not hampering browsing experience at all. It
would need to move to being DDoS for it to bring it down. </font>
<br>
<br><font size=2 face="sans-serif">Only cheaty way I can think of doing
it in the vcl is to define multiple backends one with no max_connections
and one with a fairly low max_connections. Define some ip acl's using netblocks.
If you feel all of the hammering comes from china and very little legit
web traffic you could find their netblocks and force them to use the one
with a set limit on .max_connections while others dont have such limits.
Vice versa, if you expect 90% of traffic to be within your own country
allow those to connect to the backend with higher max_connections and have
everyone else connect with a low number. If someone tries to hammer your
page it will just starve those outside your target audience but keep your
backend healthy and your regular visitors fine. Lots of caveats in that
and wouldn't recommend it, purely for science. Definitely use a firewall
or other tools.</font>
<br>
<br><font size=2 face="sans-serif">Nick</font>
<br>
<br>
<br>
<br>
<br><font size=1 color=#5f5f5f face="sans-serif">From:
</font><font size=1 face="sans-serif">alexus <alexus@gmail.com></font>
<br><font size=1 color=#5f5f5f face="sans-serif">To:
</font><font size=1 face="sans-serif">varnish-misc@varnish-cache.org</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Date:
</font><font size=1 face="sans-serif">02/17/2011 07:37 AM</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Subject:
</font><font size=1 face="sans-serif">DDOS</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Sent by:
</font><font size=1 face="sans-serif">varnish-misc-bounces@varnish-cache.org</font>
<br>
<hr noshade>
<br>
<br>
<br><tt><font size=2>How does Varnish handles DDOS?<br>
<br>
here is my problem, in our environment varnish servers static pages<br>
but dynamic pages it passed to application server (apache).<br>
so every onces in a while we have some attacker(s) who start doing<br>
some sort of attacks against us, and apache hits very high load on<br>
server and about to go down...<br>
so I look up an IP address and I block it on Varnish .vcl file, and<br>
load goes back to normal right away...<br>
is there something that can be done automatically? or is there<br>
anything can be done at all to somehow handle this type of issue?<br>
<br>
please advise<br>
<br>
-- <br>
</font></tt><a href=http://alexus.org/><tt><font size=2>http://alexus.org/</font></tt></a><tt><font size=2><br>
<br>
_______________________________________________<br>
varnish-misc mailing list<br>
varnish-misc@varnish-cache.org<br>
</font></tt><a href="http://www.varnish-cache.org/lists/mailman/listinfo/varnish-misc"><tt><font size=2>http://www.varnish-cache.org/lists/mailman/listinfo/varnish-misc</font></tt></a><tt><font size=2><br>
</font></tt>
<br><font size=2 color=blue face="sans-serif"><u><br>
</u></font><a href></a>
<p><font size=2 face="sans-serif"><b><br>
Sony Computer Entertainment Australia Pty Ltd</b><br>
Level 1, 63-73 Ann Street Surry Hills NSW 2010<br>
P.O. Box 5023 Darlinghurst NSW 2010<br>
ph: +61 (0)2 9324 9500 fax: +61 (0)2 9324 9558</font>
<p><a href=http://au.playstation.com/><font size=2 color=blue face="sans-serif"><u>http://au.playstation.com</u></font></a><font size=2 color=blue face="sans-serif"><u><br>
</u></font><a href=www.facebook.com/PlaystationAU><font size=2 color=blue face="sans-serif"><u>http://www.facebook.com/PlayStationAU</u></font></a>
<p><font size=2 face="sans-serif"><br>
<b><br>
New tools, new games, new fun.<br>
Sackboy returns in LittleBigPlanet 2<br>
Out now and exclusive to PlayStation 3</b><br>
<br>
</font><font size=2 color=blue face="sans-serif"><u><br>
</u></font><a href=http://www.littlebigplanet.com/><img src=http://au.playstation.com/media/pQ3gEuc8/lbp2corpsig.gif width=414 height=152 alt=LBP2></a><font size=2 face="Arial"><br>
<br>
**********************************************************************<br>
This email and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.
If you have received this email in error please notify postmaster@scee.net<br>
This footnote also confirms that this email message has been checked for
all known viruses.<br>
Sony Computer Entertainment Australia Pty. Limited<br>
Registered Office: Level 1, 63-73 Ann Street, Surry Hills, NSW 2010 Australia<br>
Registered in Australia: 077 583 183<br>
**********************************************************************<br>
</font><font size=5 color=#008000 face="Webdings"><br>
P</font><font size=2 color=#008000 face="Arial"><b><i> Please consider
the environment before printing this e-mail</i></b></font>