By-default too prone to DoS...

Davus · 01-01-2005, 05:43 AM

I've noticed one thing Microsoft has over Linux servers is that the webserver doesn't go down after a few hundred soliciting connections. Same thing happens with Secure Shell.

Is there any way to make SSH and Apache use a hardware-based limit instead of just giving up after about 500 connections? I can explain more if needed, but I think people with a solution will understand what I'm trying to say.

Davus · 01-01-2005, 05:35 PM

Alright then, I *will* explain more.

When you open about 500 or so connections to an Apache webserver and let the connections hang, it denies service for other users.
Same happens to Secure Shell, but with less connections.
This seems to affect virtually every Linux box I've come upon. Is there a way to tweak Linux to prevent connection floods from affecting the system, or an alternative webserver that is resistant to it?

-Dave

Davus · 01-04-2005, 06:04 AM

Mm'kay, been a few days, all is good. If a solution is found, please contact me. I'm sure the world isn't just running around with daemons that can be attacked from a 2400 baud...