Time them out [LWN.net]

Time them out

Posted Jun 25, 2009 10:16 UTC (Thu) by MathFox (guest, #6104)
In reply to: Time them out by man_ls
Parent article: Apache attacked by a "slow loris"

If you are running a blog or CMS, some of your users need to upload (POST) stories/texts, images and other media. Depending on the website, that can be quite some data, a few megabytes. Timing out too early will make your editors unhappy (and still allows for enough of a window for slow loris.) I have good experiences with server side proxies (freeing Apache resources for all users on slow links), our problem was getting a 4 MB of HTML to users on slower links. Apache kept all its resources till the last byte was sent.

(Log in to post comments)

Time them out

Posted Jun 27, 2009 13:10 UTC (Sat) by jengelh (subscriber, #33263) [Link]

So, use <LimitExcept POST> to allow such slowposting for CMS expecting dialup users.