This is fundamental problem
Posted Jun 25, 2009 5:09 UTC (Thu) by khim
In reply to: Apache attacked by a "slow loris"
Parent article: Apache attacked by a "slow loris"
The event MPM apparently isn't vulnerable to Slowloris (just
lighthttpd, IIS etc.). However, it's apparently incompatible with mod_ssl
some other input filters, so it's not a solution for us.
Single thread can not simultaneously handle many thousands connections
and do heavy-duty processing (PHP, SQL database requests, etc).
one requires response in nanoseconds, second one sometimes take seconds.
when you split these two operations in two threads frontend-backend scheme
becomes quite natural. You can use nginx to handle enormous loads
a single decent server and then safely use as many backend systems as
It IS possible to create faster and less resource-hungry server then
nginx+apache combo, but if you need to alter existing installation... there
are no contest.
The only thing nginx really needs is decent documentation...
to post comments)