[squid-users] How do I DOS-proof my cache

2008-04-16 Thread David Young
Hey Squid users :) We had a problem recently where a user with a misconfigured download accelerator was able to bring our proxy to its knees, downloading an 80MB driver about 100 times in parallel. We temporarily solved the problem by stopping the download accelerator, but this makes me

Re: [squid-users] How do I DOS-proof my cache

2008-04-16 Thread David Young
Hi Amos, Unfortunately the maxconn ACL is not suitable in our circumstance, since we service several clients who are behind NAT'd IPs.. so there may be as many as 50 real browsers behind a single IP.. the collapsedforwarding option looks interesting, I'll keep an eye on that, thanks :)