Tumblelog by Soup.io
Newer posts are loading.
You are at the newest post.
Click here to check if anything new just came in.

October 20 2010

finkregh

Marc Liyanage - Blog - Developer - Starting Apache 2.x in debug non-fork mode for gdb

Tags: apache2 debug apache work

December 10 2009

finkregh

Thinkscape perspective: Apache FLV streaming done right!

Tags: streaming apache flash video

July 20 2009

finkregh

Turbocharged » Blog Archive » Weathering heavy traffic with WordPress and Turbocharged

Tags: howto tutorial webdev performance wordpress apache scaling optimization tuning cache squid varnish

June 18 2009

finkregh

Slowloris HTTP DoS

Slowloris holds connections open by sending partial HTTP requests. It continues to send subsequent headers at regular intervals to keep the sockets from closing. In this way webservers can be quickly tied up. In particular, servers that have threading will tend to be vulnerable, by virtue of the fact that they attempt to limit the amount of threading they'll allow. Slowloris must wait for all the sockets to become available before it's successful at consuming them, so if it's a high traffic website, it may take a while for the site to free up it's sockets. So while you may be unable to see the website from your vantage point, others may still be able to see it until all sockets are freed by them and consumed by Slowloris. This is because other users of the system must finish their requests before the sockets become available for Slowloris to consume. If others re-initiate their connections in that brief time-period they'll still be able to see the site.
Tags: security http apache networking cracking dos
Reposted bycookie cookie
Older posts are this way If this message doesn't go away, click anywhere on the page to continue loading posts.
Could not load more posts
Maybe Soup is currently being updated? I'll try again automatically in a few seconds...
Just a second, loading more posts...
You've reached the end.