logo
Apache Lounge
Webmasters

 

About Forum Index Downloads Search Register Log in  RSS Apache Lounge  


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.



Post new topic   Forum Index -> Third-party Modules View previous topic :: View next topic
Reply to topic   Topic: mod_evasive available
Author
Steffen
Moderator


Joined: 15 Oct 2005
Posts: 2767
Location: Hilversum, NL, EU

PostPosted: Tue 14 Jul '15 12:11    Post subject: mod_evasive available Reply with quote

Apache mod_evasive (also formally known as Mod_dosevasive) helps to prevent HTTP DoS (DDoS) attacks or server brute force attacks. The module works it's magic by blocking access to your server from connections by the perpetrating single IP address that exceeded more than 50 concurrent connections to Apache or loading the same page more then a few times per second.

Detection is performed by creating an internal dynamic hash table of IP Addresses and URIs, and denying any single IP address from any of the following:

1. Requesting the same page more than a few times per second
2. Making more than 50 concurrent requests on the same child per second
3. Making any requests while temporarily blacklisted (on a blocking list)

The module will help protect against people sending too many requests to the webserver in an attempt to flood it. If it detects too many connections the offending ip will be blocked from the accessing apache for This is especially useful when the server is continuously getting attacked. With this default configuration it will block the offending ip for 10 minutes. If it continues to try and flood mod_evasive will automatically add more time to this.

Authors home at https://github.com/jvdmr/mod_evasive

Steffen


Last edited by Steffen on Mon 17 Jun '19 16:01; edited 1 time in total
Back to top
admin
Site Admin


Joined: 15 Oct 2005
Posts: 595

PostPosted: Mon 26 Aug '19 12:54    Post subject: Reply with quote

The original author jzdziarski did not actively maintained the module anymore.

It is forked by jvdmr which is now the official repro, see https://github.com/jvdmr/mod_evasive

Documentation: https://github.com/jvdmr/mod_evasive/blob/master/README.md

Updated to the now official version 2.0, VS16 only.

Changes:

* Support for per-vhost configuration instead of only global
* Added DOSHTTPStatus directive
* evasive20_module is now simply called evasive_module
* Greg Smith's windows port added

When you update you have to change LoadModule evasive2_module modules/mod_evasive2.so to:

LoadModule evasive_module modules/mod_evasive.so
Back to top


Reply to topic   Topic: mod_evasive available View previous topic :: View next topic
Post new topic   Forum Index -> Third-party Modules