Re: Limiting CGIs in 2.2.0

2006-03-01 Thread Nick Kew
On Wednesday 01 March 2006 11:09, Graham Leggett wrote: Hi all, I have an httpd v2.2.0 installation that from time to time is being DoS'ed by a burst of hits to a perl based CGI program (mt-comment.cgi from Moveable Type). The CGIs take up tonnes of RAM, until openldap dies, causing lots of

Re: Limiting CGIs in 2.2.0

2006-03-01 Thread Graham Leggett
Nick Kew wrote: Apart from limiting the CGI programs, another approach would be to use mod_load_average to return 503 when the system as a whole is under heavy load. Refusing cleanly to run the heavy CGI scripts at all has got to be better than killing them after they've munched your

Re: Limiting CGIs in 2.2.0

2006-03-01 Thread Paul Querna
Graham Leggett wrote: Nick Kew wrote: Apart from limiting the CGI programs, another approach would be to use mod_load_average to return 503 when the system as a whole is under heavy load. Refusing cleanly to run the heavy CGI scripts at all has got to be better than killing them after they've

Re: Limiting CGIs in 2.2.0

2006-03-01 Thread Nick Kew
On Wednesday 01 March 2006 15:22, Paul Querna wrote: LoadAvgMaxByHandler cgi-script 10 LoadAvgMax 100 Hmmm, I recollected it as being based on a Directory context (except for the global maximum which operates in post_read_request). Has it chaned, or is my memory playing sillybuggers

Re: Limiting CGIs in 2.2.0

2006-03-01 Thread Paul Querna
Nick Kew wrote: On Wednesday 01 March 2006 15:22, Paul Querna wrote: LoadAvgMaxByHandler cgi-script 10 LoadAvgMax 100 Hmmm, I recollected it as being based on a Directory context (except for the global maximum which operates in post_read_request). Nope, its currently Vhost-only.