Topic: Apache enabling large address aware , D.D.O.S etc

[Kanashii]

Has Any One some experience witch apache overloand. Last day i had some problems witch pokemons every seconds whose about 300 connection to my server Frames DDoS Attacks. So i simple add to my config Header append X-FRAME-OPTIONS "DENY" that works until today.
Today it had Slowloris HTTP DoS so i use mod_limitipconn.c and limit connection to IP.

Now i see ever ting work fine but my server had resources for handle this but apache had some limitation witch memory usage


I using Apache on x64 machine and run on wow64 ( 32bit emulation )

I know that in x86 is memory limit for application to 2Gb

http://www.eggheadcafe.com/software/aspnet/30101315/wow64-and-actual-phisical.aspx

On this topic you can see that to enabled LARGEMEMORYADDRESSAWAR you need to compile Apache witch this switch

In official compilation i not see that is selected

So i found how to enabled in other way

http://www.jaloonz.com/2008/04/enabling-large-address-aware-for-games.html

Now apache use ~+-:500Mb of RAM it also had
sub process like Fcgid every process ~10Mb
= 900MB

Every 24/h I use in proceslasso option like -> trim virtual memory for database and apache, that works not so bad memory usage for 6GB drop to 2 -> 4Gb witch out restarting.


I try to found solution for this issue try use apache x64 but no all modules are compiled, so i thinka about use nginx (Beta) for static file and loand balancing on one server.

Has some one similar problems ?

[James Blond]

I don't see your problem since apache takes only 500 MB. Every process that is emulated can use 2 GB of from. Since you separated other stuff with fcgid there shouldn't be a problem. If there is enough physical RAM.

Which x64 modules do you need? Maybe I'm able to build them.

[Kanashii]

bw_module modules/mod_bw.so
limitipconn_module modules/mod_limitipconn.dll
fcgid_module modules/mod_fcgid.so

Also PHP need be in 64bit ?
In IIS x64 can run PHP as 32bit but on apache i think need x64 PHP

[James Blond]

if you run php over fcgid it doesn't matter if you use 32 or 64 bit version. Only if you need to run php as module you need the 64 bit version. Honestly I haven't tried out to run the 32 bit module in the 64 bit apache.

[James Blond]

[James Blond]

For mod_bw see http://www.apachelounge.com/viewtopic.php?p=15460#15460

[James Blond]

[Kanashii]

thank you very much