Saturday, June 27, 2009

Anti-Slowloris DOS patch in Funtoo

I've committed an anti-slowloris patch to Funtoo, in apache-2.2.11-r1. I recommend that Apache users upgrade to this new version. (see http://bit.ly/WGSvD)


All still-affected MPMs (everything except prefork) have been masked. The intent here is to force you to use an Apache configuration that is not vulnerable to slowloris. If you are in a situation where slowloris cannot affect you, you can manually enable the other MPMs to gain access to them.

I tested the anti-slowloris patch myself on a Drupal installation I had on my machine. Without the patch, slowloris was able to make Apache unresponsive immediately. With the patch, Apache was a bit laggy but continued to run with no problems.

0 comments: