On tor, 2008-05-29 at 23:30 +0800, Changying Li wrote: > Hi. I am using squid 2.6 as my reverse proxy. Sometimes there are many > many requests from same ip in a very shot period ( like 100 requests/ > second). is it possible to deny these ips dynamically ? > I has written a script to check access log one time per minute in cron > and add these ips into deny list. Is there a bettle way to do ? the maxconn acl is a partial solution. If that's not sufficient then shouldn't be very hard to add an acl type that denies access if above a certain rate in requests/s or bytes... There is counters for both in the internal client db.. Regards Henrik
Attachment:
signature.asc
Description: This is a digitally signed message part