ğDenial of ServiceĞ Evasion

Everybody has probably already herad of DoS-attacks that try to bring down servers through many senseless queries in a short time period. The extension module mod_dosevasive tries to detect and reject such requests by simply restricting the amount of queries in a specified period of time from one of the requesting clients.

The algorithm needs of course some fine tuning to meet the power of your server machine (big ones are less likely to go down because of 1000 requests per second). The configuration directives you may want to check out are DosEvasiveTimer and DosEvasiveMaxReqs. With DosEvasiveError you may change the error response code which gets sent back if an attack is detected.

---

NANOWEB, the aEGiS PHP web server