Ivan Barrera A. <Bruce <at> Ivn.cl> writes: > > William A. Rowe, Jr. wrote: > > Ivan Barrera A. wrote: > >> William A. Rowe, Jr. wrote: > >>> No. Run multiple instances of httpd against different IP addresses. > >>> > >>> There's no way to decide about accepting per-named-host. > >> There are some third party modules that can do it. > >> I only wrote for apache 2, but there is equivalents in apache 1. > > > > Let me clarify - it's possible through a third party or write-your-own > > module to decide if a given host should be processed or rejected with > > a 5XX error. > > > > But it's not possible to control which of many pending connections the > > server will accept() next by name, because the name is one of the http > > header fields that can only be parsed once the connection -is- accepted. > > > > By IP address and/or multiple instances, it's possible to throttle the > > number of pending and accepted connections, because it's not dependent > > on inspecting the http headers. > > > > Seen that way, your answer is right. > However, i think the question was more about trying to avoid some site > using most of the apache childs for itself. That's why he asked about > "limit a site" (refering to a vhost). > > Trying to limit in the way of ip address, will be similar in attemping > to avoid a DoS attack. > Correct, I'm using cPanel/WHM which is a software using Linux/Apache/MySQL/PHP to sell hosting for web and E-mail. It does a good job in my opinion giving you the tools needed to do that. I have a shared hosting server that is normally very good for all the customers on it, but I have a few sites that occasionally use up all 250 MaxClients for themselves and leave no available connections for the other paying customers. I have questions/suggestions in with cPanel to add that functionality to their software if it's possible. I'm also researching if I can add that manually while waiting for them to figure it out. Better service for all my customers is my goal and also being able to actually provide the service I sell. Chuck --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|