Re: [users@httpd] Limit the number of connection per virtual host

2015-06-12 Thread Nick Kew
On Fri, 2015-06-12 at 14:55 +0200, Sylvain Goulmy wrote: > I get your point Nick, but at last you can reject the request instead > of sending it to a backend that is stuck or that answers too slowly. If the issue is a backend, use the load balancer with heartbeat to monitor the state of the back

Re: [users@httpd] Limit the number of connection per virtual host

2015-06-12 Thread Jim Walls
On 6/12/2015 5:28 AM, Sylvain Goulmy wrote: Thank you for your feedback. But do you protect your platform then without such a functionality ? I'll bite - protect it from what? -- 73 - Jim Walls - K6CCC j...@k6ccc.org Ofc: 818-548-4804 http://members.dsle

Re: [users@httpd] Limit the number of connection per virtual host

2015-06-12 Thread Sylvain Goulmy
> > Bear in mind that you only know which virtual host is requested > when you read the Host: header, which is after you already > accepted the connection. > There are third-party modules for managing loads and protecting > a server from attack. Some of them might be worth a look. I get your poi

Re: [users@httpd] Limit the number of connection per virtual host

2015-06-12 Thread Sylvain Goulmy
I have made many investigations but i haven't found such third party modules for Apache 2.4. And sometimes when i find a part of code that could do the job, it seems so confidential that it is difficult to know if you can fully trust the implementation and consider sending it on LE. There are ofte

Re: [users@httpd] Limit the number of connection per virtual host

2015-06-12 Thread Nick Kew
On Fri, 2015-06-12 at 12:18 +, Eric Covener wrote: > Apache doesn't provide it. > - Why Apache doesn't provide such a functionality ? > > Nothing special for this function -- not enough interest/time for > people in the project to write/test/support such a thing Bear in mind that y

Re: [users@httpd] Limit the number of connection per virtual host

2015-06-12 Thread Sylvain Goulmy
Thank you for your feedback. But do you protect your platform then without such a functionality ? On Fri, Jun 12, 2015 at 2:18 PM, Eric Covener wrote: > - Can you confirm that Apache does not provide any mecanism allowing to >> limit the number of connection per virtual host, just to be sure th

Re: [users@httpd] Limit the number of connection per virtual host

2015-06-12 Thread Eric Covener
> > - Can you confirm that Apache does not provide any mecanism allowing to > limit the number of connection per virtual host, just to be sure that i'm > not missing something ? > Apache doesn't provide it. > > - Why Apache doesn't provide such a functionality ? :) From my very humble > user per

[users@httpd] Limit the number of connection per virtual host

2015-06-12 Thread Sylvain Goulmy
Hi all, I'm using Apache 2.2 on LE for several years now and i use intensively the virtual host mechanism (300 virtual hosts per http instance). As soon as you start sharing resources between applications, you want to protect your platform and prevent an application from taking all the threads an