LPO/IP Buyers and Vendors Meet

2011-08-22 Thread David Miller
Hello Sir, We are organizing the Global LPO/IP (Legal Process Outsourcing/Intellectual Property) conference, Buyers and Vendors meet in the LPO Industry in Los Angeles on 5-6 October. Would you like to know more about it? If you won't be able to travel to Los Angeles on those days, I can also

Website crawling while connecting via haproxy balanced url

2011-08-22 Thread Amol
Hi, One of my tester complained this morning that he can access the servers fine when he hits them individually and with decent response time, but when he access via the haproxy load balanced url, the website is crawling for him. The other interesting thing is people at other locations have no

Re: Defending against the Apache killer

2011-08-22 Thread Baptiste
Hi, Why not only dropping this Range:bytes=0- header? cheers 2011/8/22 Levente Peres sheri...@eurosystems.hu: Hello, There're a number of webserver-mace apps on the net, the newest that I heard of being the so called Apache killer script I saw a few days agon on Full disclosure... Here

Re: Defending against the Apache killer

2011-08-22 Thread Kai
Hi, 1. install nginx as frontend 2. install latest version of Apache as backend (afair 2.2.18 was not vulnerable to such DoS already, and 2.2.19 should be ok too) 3. remove apache's mod_deflate 4. done -- Cheers, Kai

RE: Defending against the Apache killer

2011-08-22 Thread Svancara, Randall
This is nothing new as brute force DOS attacks have been around for a while. I am not sure this is an HA-Proxy feature or more of a MOD_SECURITY/iptables feature. Simple iptables rate limiting would be sufficient in thwarting this attack. For example, I am using this for SSH now, but very

Frontend instant 200 response

2011-08-22 Thread Guy Knights
Hi, We have some HTTP calls from our app that we'd like to fire and forget, but we need the Haproxy frontend send a response to the requester immediately after it passes the request to the backend queue. The intention is to replace our Gearman setup and thus save us some time in maintenance and