NGiNX to prevent DDoS

gromminger · September 16, 2009, 3:55pm

Hello Folks

i got setup where nginx acts as reverse proxy for 3 apache backends.
yesterday we had the case that some kind of bot or spider started
attacking one domain which gets through nginx.

is there any possibility to configure nginx for something like “rate
limiting” or should i better go with iptables? the hardware is strong
enaugh to take this (quadcore xeons).

Greetings

Juergen

gromminger · September 16, 2009, 4:21pm

hi,

look at the modules HttpLimitReq and HttpLimitZone

http://wiki.nginx.org/NginxHttpLimitReqModule
http://wiki.nginx.org/NginxHttpLimitZoneModule

++ jerome

2009/9/16 Juergen G. [email protected]:

gromminger · September 16, 2009, 4:31pm

This might also provide additional info:
https://calomel.org/nginx.html

gromminger · September 16, 2009, 5:00pm

Thanks to all of you

@nuno

thanks for this link, the samples are great

Nuno MagalhÃ£es wrote:

This might also provide additional info:
Nginx Secure SSL Web Server @ Calomel.org

–
InterNetX GmbH
Maximilianstrasse 6
D-93047 Regensburg

Tel. +49 941 59559-480
Fax +49 941 59559-245

GeschÃ¤ftsfÃ¼hrer/CEO: Thomas MÃ¶rz
Amtsgericht Regensburg, HRB 7142