Re: Firewall (iptables) rule to limit Apache connections

2010-05-19 Thread Benjamin Scott
On Wed, May 19, 2010 at 9:26 AM, Kevin D. Clark wrote: > Have you given any consideration to the fact that in HTTP 1.1 there > are persistent connections and that the level of control offered to > you by iptables might be too low-level for you to effectively manage > the traffic that your system i

Re: Firewall (iptables) rule to limit Apache connections

2010-05-19 Thread Kevin D. Clark
Greg Rundlett (freephile) writes: > Occasionally we'll get a bunch of web requests from a single source (example > user agent of HTTrack or Opera or IE5 will all give a user the ability to > make a huge number of web requests). This ties up our Apache server as all > available workers are sendin

Re: Firewall (iptables) rule to limit Apache connections

2010-05-19 Thread Dave Johnson
Greg Rundlett (freephile) writes: > I'm running Apache on a RedHat ES 4 with a 2.6.9 kernel. > > Occasionally we'll get a bunch of web requests from a single source (example > user agent of HTTrack or Opera or IE5 will all give a user the ability to > make a huge number of web requests). This tie

Firewall (iptables) rule to limit Apache connections

2010-05-18 Thread Greg Rundlett (freephile)
I'm running Apache on a RedHat ES 4 with a 2.6.9 kernel. Occasionally we'll get a bunch of web requests from a single source (example user agent of HTTrack or Opera or IE5 will all give a user the ability to make a huge number of web requests). This ties up our Apache server as all available work