Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


In this Discussion

How do you precisely set CONNLIMIT & PORTFLOOD for the port 80?
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

How do you precisely set CONNLIMIT & PORTFLOOD for the port 80?

postcdpostcd Member
edited August 2016 in Help

Hello,

most un-optimized site with most elements (images, css, js..) i host has approx. 110 elements and it takes around 18 HTTP connections per second on slower internet and slower PC.

Here i parsed HTTP access log for that site: http://pastebin.com/ycn3m1si

It is nice to see how HTTP connections are spread over the time.

Is this all you need to know in order to set firewalls connection limiting per IP?

Without optimizing, how should i set config server firewall CONNLIMIT (max. IP connections per the port and time interval) & PORTFLOOD (maximum concurrent new/SYN connecton of an IP) so i do not ban this site visitor who browse this website actively?

CSF readme where these variables are explained: http://download.configserver.com/csf/readme.txt

From my point of view i know how to set PORTFLOOD. I would set like 25 concurrent connection per IP when i got 18 concurrent. But is it enough? Why not?

Sligtly more difficult is for me to set the limit per time interval

Thank You

Comments

  • I am not using CSF for connlimit. Just using feature in webservers (nginx, hiawatha, lighttpd and httpd).

    Thanked by 1postcd
Sign In or Register to comment.