Varnish is the answer

Posted Jun 26, 2009 13:04 UTC (Fri) by dion (guest, #2764)
In reply to: All modern OSes offer alternative by quotemstr
Parent article: Apache attacked by a "slow loris"

Varnish only allocates a worker thread once the entire request has been received from the client, so simply slapping Varnish in front of the webserver under attack will defeat the attack.

If all you want to do is to mitigate a Slow Loris attack then just move your web server to a different port and start Varnish with the default configuration on port 80.

(Log in to post comments)