Update on protection against slowloris

[Tom Evans]

On Thu, 2009-10-01 at 19:46 +0100, István wrote:
> "The bad news is that it can indeed take a badly-configured apache
> server down, and the worse news is that that includes a low-traffic
> out-of-the box configuration.  Even with the Event MPM, slowloris can
> tie up one worker thread per connection."
> 
> 
> 
> 
> for sure
> 

It doesn't tie up one thread, one thread is partially occupied by
waiting for the slowloris connection to finish sending the request. That
thread can still handle other connections that are sending requests. In
our tests, running a couple of slowloris instances against event MPM had
virtually no effect.

Cheers

Tom