Ivan Barrera A. <Bruce <at> Ivn.cl> writes:

> 
> William A. Rowe, Jr. wrote:
> > Ivan Barrera A. wrote:
> >> William A. Rowe, Jr. wrote:
> >>> No.  Run multiple instances of httpd against different IP addresses.
> >>>
> >>> There's no way to decide about accepting per-named-host.
> >> There are some third party modules that can do it.
> >> I only wrote for apache 2, but there is equivalents in apache 1.
> > 
> > Let me clarify - it's possible through a third party or write-your-own
> > module to decide if a given host should be processed or rejected with
> > a 5XX error.
> > 
> > But it's not possible to control which of many pending connections the
> > server will accept() next by name, because the name is one of the http
> > header fields that can only be parsed once the connection -is- accepted.
> > 
> > By IP address and/or multiple instances, it's possible to throttle the
> > number of pending and accepted connections, because it's not dependent
> > on inspecting the http headers.
> > 
> 
> Seen that way, your answer is right.
> However, i think the question was more about trying to avoid some site
> using most of the apache childs for itself. That's why he asked about
> "limit a site" (refering to a vhost).
> 
> Trying to limit in the way of ip address, will be similar in attemping
> to avoid a DoS attack.
> 

Correct, I'm using cPanel/WHM which is a software using Linux/Apache/MySQL/PHP 
to sell hosting for web and E-mail. It does a good job in my opinion giving 
you the tools needed to do that. I have a shared hosting server that is 
normally very good for all the customers on it, but I have a few sites that 
occasionally use up all 250 MaxClients for themselves and leave no available 
connections for the other paying customers.

I have questions/suggestions in with cPanel to add that functionality to their 
software if it's possible. I'm also researching if I can add that manually 
while waiting for them to figure it out. Better service for all my customers 
is my goal and also being able to actually provide the service I sell.

Chuck 



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to