On Tue, 4 Sep 2007 14:19:23 +0200
Axel-Stéphane  SMORGRAV <[EMAIL PROTECTED]> wrote:

> I will create a Bugzilla report for this issue.

That'll be PR#43308, in which you wrote:

> In Apache 2.2.x a worker, and the associated backend connection pool,
> is created for each ProxyPass directive. In that case the backend
> connections will by default be persistent (reusable).

> (chop - RewriteRule [P])

> I therefore suggest to modify ap_proxy_pre_request() in order to
> create new workers as needed in the event of requests that do not
> match an existing worker.

Does this open the way to a DoS?  If a rewriterule[P] enables backends
to be derived from the request URI, then you're creating unlimited
numbers of workers, which may never be used.  Where are the limits
on that?

-- 
Nick Kew

Application Development with Apache - the Apache Modules Book
http://www.apachetutor.org/

Reply via email to