Apache :: mod_evasive 2.4.0 Available for testing

Apache LoungeWebmasters

About Forum Index Downloads Search Register Log in RSS X

Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.

Forum Index -> Third-party Modules

View previous topic :: View next topic

Topic: mod_evasive 2.4.0 Available for testing

Author

wilfried.deguil

Joined: 06 Nov 2024
Posts: 2
Location: FRANCE

Posted: Wed 26 Feb '25 9:46 Post subject: mod_evasive 2.4.0 Available for testing

Hello, A new version (2.4.0 of mod_evasive is available at https://github.com/jvdmr/mod_evasive/releases/tag/2.4.0 Is it possible to update the version on the Downloads link? Best regards.

Steffen
Moderator

Joined: 15 Oct 2005
Posts: 3116
Location: Hilversum, NL, EU

Posted: Wed 26 Feb '25 14:55 Post subject:

Please test : https://www.apachelounge.com/download/VS17/modules/mod_evasive-2.4.0-win64-VS17.rar

Stray78

Joined: 15 Apr 2024
Posts: 39
Location: USA

Posted: Thu 27 Feb '25 4:55 Post subject:

Thank you. Will Install now.

With Apache/2.463 (Win64) OpenSSL/3.4.0 PHP/8.4.4 mod_qos/11.74 mod_security/2.9.8 CoreRuleSet/4.11.0
Edit:
In Config

Code:

# Evasive Module Stuff #
<IfModule evasive_module>
DOSEnabled true
DOSHashTableSize 3097
DOSPageCount 2
DOSSiteCount 50
DOSPageInterval 1
DOSSiteInterval 1
DOSBlockingPeriod 10
# DOSHTTPStatus 429
#DOSSystemCommand "C:/SomeAppDir/someapp.exe %s"
DOSLogDir "E:/Local site/logs/Apache/DOS/"
# DOSEmailNotify
# DOSWhitelist
# DOSWhitelist
</IfModule>

Benchmark with

Code:

abs -n 1000 -c 10 https://www.mysite.com/

Doesn't appear to be working. Not sure if it is my setup or what.

Code:

172.16.10.2 - - [26/Feb/2025:23:34:38 -0500] "GET / HTTP/1.0" 200 25773 "-" "ApacheBench/2.3"
172.16.10.2 - - [26/Feb/2025:23:34:39 -0500] "GET / HTTP/1.0" 200 25772 "-" "ApacheBench/2.3"
172.16.10.2 - - [26/Feb/2025:23:34:39 -0500] "GET / HTTP/1.0" 200 25772 "-" "ApacheBench/2.3"
172.16.10.2 - - [26/Feb/2025:23:34:39 -0500] "GET / HTTP/1.0" 200 25773 "-" "ApacheBench/2.3"
172.16.10.2 - - [26/Feb/2025:23:34:39 -0500] "GET / HTTP/1.0" 200 25772 "-" "ApacheBench/2.3"
172.16.10.2 - - [26/Feb/2025:23:34:39 -0500] "GET / HTTP/1.0" 200 25772 "-" "ApacheBench/2.3"
172.16.10.2 - - [26/Feb/2025:23:34:39 -0500] "GET / HTTP/1.0" 200 25773 "-" "ApacheBench/2.3"
172.16.10.2 - - [26/Feb/2025:23:34:47 -0500] "GET / HTTP/1.0" 200 25772 "-" "ApacheBench/2.3"
172.16.10.2 - - [26/Feb/2025:23:34:47 -0500] "GET / HTTP/1.0" 200 25771 "-" "ApacheBench/2.3"

admin
Site Admin

Joined: 15 Oct 2005
Posts: 701

Posted: Thu 27 Feb '25 10:40 Post subject:

Do you Run Win7 ? Does run version 2.3.0 ? Any errors in the Apache error.log ? Any in E:/Local site/logs/Apache/DOS/ ? Any in windows event viewer ?

mrdj1024

Joined: 03 Apr 2023
Posts: 57
Location: Bridgeton,NJ,USA

Posted: Thu 27 Feb '25 23:08 Post subject:

Stray78 wrote:

Thank you. Will Install now.

With Apache/2.463 (Win64) OpenSSL/3.4.0 PHP/8.4.4 mod_qos/11.74 mod_security/2.9.8 CoreRuleSet/4.11.0
Edit:
In Config

Code:

Benchmark with

Code:

abs -n 1000 -c 10 https://www.mysite.com/

Doesn't appear to be working. Not sure if it is my setup or what.

Code:

172.16.10.2 - - [26/Feb/2025:23:34:38 -0500] "GET / HTTP/1.0" 200 25773 "-" "ApacheBench/2.3"
172.16.10.2 - - [26/Feb/2025:23:34:39 -0500] "GET / HTTP/1.0" 200 25772 "-" "ApacheBench/2.3"
172.16.10.2 - - [26/Feb/2025:23:34:39 -0500] "GET / HTTP/1.0" 200 25772 "-" "ApacheBench/2.3"
172.16.10.2 - - [26/Feb/2025:23:34:39 -0500] "GET / HTTP/1.0" 200 25773 "-" "ApacheBench/2.3"
172.16.10.2 - - [26/Feb/2025:23:34:39 -0500] "GET / HTTP/1.0" 200 25772 "-" "ApacheBench/2.3"
172.16.10.2 - - [26/Feb/2025:23:34:39 -0500] "GET / HTTP/1.0" 200 25772 "-" "ApacheBench/2.3"
172.16.10.2 - - [26/Feb/2025:23:34:39 -0500] "GET / HTTP/1.0" 200 25772 "-" "ApacheBench/2.3"
172.16.10.2 - - [26/Feb/2025:23:34:39 -0500] "GET / HTTP/1.0" 200 25773 "-" "ApacheBench/2.3"
172.16.10.2 - - [26/Feb/2025:23:34:39 -0500] "GET / HTTP/1.0" 200 25773 "-" "ApacheBench/2.3"
172.16.10.2 - - [26/Feb/2025:23:34:47 -0500] "GET / HTTP/1.0" 200 25772 "-" "ApacheBench/2.3"
172.16.10.2 - - [26/Feb/2025:23:34:47 -0500] "GET / HTTP/1.0" 200 25771 "-" "ApacheBench/2.3"

i know this might seem a bit silly,but did you double check to ensure mod evasive is loaded in your httpd conf file?

Stray78

Joined: 15 Apr 2024
Posts: 39
Location: USA

Posted: Fri 28 Feb '25 4:34 Post subject:

admin wrote:

Do you Run Win7 ?

Does run version 2.3.0 ?

Any errors in the Apache error.log ?
Any in E:/Local site/logs/Apache/DOS/ ?
Any in windows event viewer ?

Server 2025 Datacenter Edition.

I will test some older versions.

No errors in Apache logs. only 200s.

DOSLogDir is empty.

Nothing in event viewer

Code:

Benchmarking www.mysite.com (be patient)
Completed 100 requests
Completed 200 requests
Completed 300 requests
Completed 400 requests
Completed 500 requests
Completed 600 requests
Completed 700 requests
Completed 800 requests
Completed 900 requests
Completed 1000 requests
Finished 1000 requests

Server Software: Apache/2.4.63
Server Hostname: www.mysite.com
Server Port: 443
SSL/TLS Protocol: TLSv1.3,TLS_AES_256_GCM_SHA384,256,256
Server Temp Key: X25519 253 bits
TLS Server Name: www.mysite.com

Document Path: /
Document Length: 25773 bytes

Concurrency Level: 10
Time taken for tests: 398.222 seconds
Complete requests: 1000
Failed requests: 436
(Connect: 0, Receive: 0, Length: 436, Exceptions: 0)
Total transferred: 26460506 bytes
HTML transferred: 25772506 bytes
Requests per second: 2.51 [#/sec] (mean)
Time per request: 3982.221 [ms] (mean)
Time per request: 398.222 [ms] (mean, across all concurrent requests)
Transfer rate: 64.89 [Kbytes/sec] received

Connection Times (ms)
min mean[+/-sd] median max
Connect: 1 3 1.2 3 6
Processing: 633 3969 112.4 3976 4008
Waiting: 622 3967 112.6 3974 4002
Total: 637 3973 112.3 3980 4010

Percentage of the requests served within a certain time (ms)
50% 3980
66% 3983
75% 3986
80% 3987
90% 3991
95% 3994
98% 3999
99% 4000
100% 4010 (longest request)

mrdj1024 wrote:

i know this might seem a bit silly,but did you double check to ensure mod evasive is loaded in your httpd conf file?

httpd -M shows it is running

Code:

Loaded Modules:
core_module (static)
win32_module (static)
mpm_winnt_module (static)
http_module (static)
so_module (static)
actions_module (shared)
alias_module (shared)
allowmethods_module (shared)
asis_module (shared)
auth_basic_module (shared)
authn_core_module (shared)
authn_file_module (shared)
authz_core_module (shared)
authz_groupfile_module (shared)
authz_host_module (shared)
authz_user_module (shared)
autoindex_module (shared)
deflate_module (shared)
dir_module (shared)
env_module (shared)
[b]evasive_module (shared)[/b]
expires_module (shared)
filter_module (shared)
http2_module (shared)
headers_module (shared)
include_module (shared)
isapi_module (shared)
log_config_module (shared)
mime_module (shared)
negotiation_module (shared)
php_module (shared)
qos_module (shared)
rewrite_module (shared)
security2_module (shared)
setenvif_module (shared)
socache_shmcb_module (shared)
ssl_module (shared)
unique_id_module (shared)

Stray78

Joined: 15 Apr 2024
Posts: 39
Location: USA

Posted: Fri 28 Feb '25 5:12 Post subject:

admin wrote:

Do you Run Win7 ?

Does run version 2.3.0 ?

Any errors in the Apache error.log ?
Any in E:/Local site/logs/Apache/DOS/ ?
Any in windows event viewer ?

Server 2025 Datacenter Edition.

I will test some older versions.

No errors in Apache logs. only 200s.

DOSLogDir is empty.

Nothing in event viewer

mrdj1024 wrote:

i know this might seem a bit silly,but did you double check to ensure mod evasive is loaded in your httpd conf file?

httpd -M shows it is running

EDIT:
So I figured it out. in my vhost I had just this,

Code:

<IfModule mod_evasive.c>
DOSEnabled True
</IfModule>

I blocked that out and it works now. Maybe because the other settings were not in there but only the main config.

Got lots of 403s now. Sorry operator error.

Topic: mod_evasive 2.4.0 Available for testing

View previous topic :: View next topic

Forum Index -> Third-party Modules