Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Shells Virtual Desktop
BMail.ag - Secure Email Service
Server.net
CPLicense.net
VPS Server
Buy VPN
Vultr
VMs for AI
HostDare
HostDare
ReliableSite White-Label Dedicated Hosting for Resellers
InterServer VPS
BMail.ag - Secure Email Service
Best VPN
High-Performance Bare Metal Server Solutions
Karvl.com
Server Mania Cloud Hosting
DataWagon Hosting
AlphaVPS Hosting
Evoxt.com
Clouvider
VPS Hosting with NVMe
Residential IPs in the US & 4G Mobile Proxies in EU & US with Unlimited Bandwidth
ReliableSite White-Label Dedicated Hosting for Resellers
Rabisu - Hosting Solutions
Shells Virtual Desktop

In this Discussion

New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

How do you precisely set CONNLIMIT & PORTFLOOD for the port 80?

postcdpostcd Member
edited August 2016 in Help

Hello,

most un-optimized site with most elements (images, css, js..) i host has approx. 110 elements and it takes around 18 HTTP connections per second on slower internet and slower PC.

Here i parsed HTTP access log for that site: http://pastebin.com/ycn3m1si

It is nice to see how HTTP connections are spread over the time.

Is this all you need to know in order to set firewalls connection limiting per IP?

Without optimizing, how should i set config server firewall CONNLIMIT (max. IP connections per the port and time interval) & PORTFLOOD (maximum concurrent new/SYN connecton of an IP) so i do not ban this site visitor who browse this website actively?

CSF readme where these variables are explained: http://download.configserver.com/csf/readme.txt

From my point of view i know how to set PORTFLOOD. I would set like 25 concurrent connection per IP when i got 18 concurrent. But is it enough? Why not?

Sligtly more difficult is for me to set the limit per time interval

Thank You

Comments

  • I am not using CSF for connlimit. Just using feature in webservers (nginx, hiawatha, lighttpd and httpd).

    Thanked by 1postcd
Sign In or Register to comment.