How To Defend slowloris DDoS With mod_qos (Apache2 On Debian [Lenny])Jul 23, 2009, 06:02 (0 Talkback[s])
(Other stories by Marcus Spiegel)
WEBINAR: On-demand webcast
How to Boost Database Development Productivity on Linux, Docker, and Kubernetes with Microsoft SQL Server 2017 REGISTER >
[ Thanks to Falko Timme for this link. ]
"Some servers may have a smaller tolerance for timeouts than others, but Slowloris can compensate for that by customizing the timeouts. There is an added function to help you get started with finding the right sized timeouts as well. As a side note, Slowloris does not consume a lot of resources so modern operating systems don't have a need to start shutting down sockets when they come under attack, which actually in turn makes Slowloris better than a typical flooder in certain circumstances. Think of Slowloris as the HTTP equivalent of a SYN flood.
0 Talkback[s] (click to add your comment)