[Cherokee] Slowloris... Cherokee is safe !

Alvaro Lopez Ortega alvaro at alobbs.com
Sat Jun 20 15:23:29 CEST 2009


Hello Jędrzej and Ivan,

Thanks for checking and getting back to us! :-)

On 20-jun-09, at 00:13, Iván Chavero wrote:

> Nice!!!
>
> I was about to send a message to the list with the same good news  
> when i
> found yours :-D
>
> I tested it against a cherokee 0.99.15 with a moodle installation and
> everything worked fine!
>
> El 19/6/09 07:45, Jędrzej Nowak escribió:
>> Hey!
>>
>> In my short tests it looks that Cherokee is safe when it's attacked  
>> by
>> "Slowloris" ( http://ha.ckers.org/slowloris/?docid=EBFPB_IBPWZWR )
>>
>> Oficially only Lighttpd and IIS is safe.
>>
>> I have tested slowloris on many sites using apache, and I must  
>> confirm
>> it... Apache freezes one second after start... Cherokee works even
>> after few minutes ;)
>>
>> Soo, it's good message before weekend ;D
>>
>> Btw. Don't over use it :)
>>
>> Greetings
>> Jędrzej Nowak
>> _______________________________________________
>> Cherokee mailing list
>> Cherokee at lists.octality.com
>> http://lists.octality.com/listinfo/cherokee
>>
>
> _______________________________________________
> Cherokee mailing list
> Cherokee at lists.octality.com
> http://lists.octality.com/listinfo/cherokee

--
Octality
http://www.octality.com/



More information about the Cherokee mailing list