by Baptiste Assmann | Oct 16, 2012 | Tech
Synopsis I’ve already described WAF in a previous article, where I spoke about WAF scalability with apache and modsecurity. One of the main issue with Apache and modsecurity is the performance. To address this issue, an alternative exists: naxsi, a Web...
by Baptiste Assmann | Oct 12, 2012 | Tech
Greeting to Thomas Heil, from our German partner Olanis, for his help in Apache and modsecurity configuration assistance. What is a Web Application Firewall (WAF)? Years ago, it was common to protect networks using a firewall… Well known devices which filter...
by Baptiste Assmann | Jul 3, 2012 | Tech
In a recent article, we saw how we can use a load-balancer as a first row of defense against DDOS. The purpose of the present article to provide a configuration to protect your applications against HTTP request flood. The configuration below allows only 10 requests...
by Baptiste Assmann | Feb 27, 2012 | Tech
We’ve seen recently more and more DOS and DDOS attacks. Some of them were very big, requiring thousands of computers… But in most cases, this kind of attacks are made by a few computers aiming to make a service or website unavailable, either by sending it too...
by Baptiste Assmann | Feb 17, 2012 | Tech
Synopsis For different reason, we may want to limit the number of connections or the number of requests we allow to a web farm. In example: give more capacity to authenticated users compared to anonymous one limit web farm users per virtualhost protect your website...