Our features site is undergoing a refresh! Be sure to explore the revamped site and discover our latest product roadmap launching here on Monday, March 18th.
This object is in archive! 

To allow protection against HTTP SLOW attacks, Include mod_reqtimeout in Easyapache

maever shared this idea 12 years ago
Completed

Fairly simply request,


HTTP Slow attacks are, for any webhoster, a serious issue.

Basically a single laptop on a poor wifi connection now has the power to cause DoS "Denial of Service" on your entire webserver. Though configuration of apache can go a long way, this will not be enough for everyone. The software to cause these slowattacks is very easy to find and even has a project on google code. http://code.google.com/p/slowhttptest/


Some security sites recommend this module as a way to help fend off HTTP slow attacks.

https://community.qualys.com/blogs/securitylabs/2011/11/02/how-to-protect-against-slow-http-attacks


As part of the easy/manageability of Cpanel May I suggest you include this module in easyapache and add the corresponding 3 directives to the global apache to assist in offering a solution to such attacks

Best Answer
photo

Administrators may use mod_qos to protect against these kinds of attacks. EasyApache has provided mod_qos for some time.

Replies (1)

photo
1

Administrators may use mod_qos to protect against these kinds of attacks. EasyApache has provided mod_qos for some time.

Replies have been locked on this page!