Re: How to protect a Tomcat server/Webapp from (D)DOS attacks

2014-06-18 Thread Lmhelp1
Hello Chris, Thank you for your answer. Apache ships with mod_evasive that allows you do this. I have used this in the past with some success. The other alternative I am aware of is to use mod_security. It looks interesting. I am not aware of anything that will run directly in front of

How to protect a Tomcat server/Webapp from (D)DOS attacks

2014-06-17 Thread Lmhelp1
Hello, My question is not really Tomcat specific but, as my Webapp is a Tomcat Webapp, I thought I should post this question here. Below is what I would like to ask you: How do you usually protect your Tomcat servers and Webapps from (D)DOS ((Distributed) Denial-of-service) attacks? At

Re: How to protect a Tomcat server/Webapp from (D)DOS attacks

2014-06-17 Thread chris derham
Léa, Below is what I would like to ask you: How do you usually protect your Tomcat servers and Webapps from (D)DOS ((Distributed) Denial-of-service) attacks? If you allow the DOS traffic to make it all the way up to the application layer before you detect it, then the DOS will still have an