Portal Home > Knowledgebase > Articles Database > Does ddos attack lighthttpd ?
Does ddos attack lighthttpd ?
| Posted by loyaler, 09-02-2008, 08:33 AM |
| Does ddos attack lighthttpd as well.
I have seen it attacking apache but never came through light httpd.
|
| Posted by zacharooni, 09-02-2008, 08:39 AM |
| Denial of Service affects any service that creates a socket in the LISTEN state. Lighttpd is just a little better at managing the sockets. But needless to say, nothing is 100% immune to attack.
|
| Posted by loyaler, 09-02-2008, 08:55 AM |
| so apache is more vulnerable ?
|
| Posted by zacharooni, 09-02-2008, 08:58 AM |
| It all depends on how your server is setup, and how your http daemon is configured, memory usage, firewalls, /proc settings, a lot of factors are involved. But by default, Apache is much more vulnerable to attack than most webservers.
|
| Posted by Xous, 09-02-2008, 09:35 AM |
| Hi,
The http server software you use is irrelevant as if a DDoS uses enough bandwidth to saturate your up-link it doesn't matter what software you are running.
lighttpd is designed to be more efficient and would probably use less resources than apache when configured correctly and might be able to preform better if the DDoS does not take up all available bandwidth.
|
| Posted by RBBOT, 09-02-2008, 02:15 PM |
| Apache in its default prefork MPM configuration is more vulnerable, as additional sockets consume resources quickly. Apache in with the worker MPM enabled is not that different to lighttpd in this respect.
|
| Posted by loyaler, 09-04-2008, 06:32 AM |
| got any knowledge of how to set up firewall so that ddos is less vulnerable in apache ?
|
| Posted by CretaForce, 09-04-2008, 06:43 AM |
| From time to time we get some small DDos attacks (~20Mbps) which lighttpd successfully handles. When the web-page is static we don't even notice there is an attack.
|
| Posted by loyaler, 09-04-2008, 06:55 AM |
| Actually we shifted from lighthttpd to apache, as we need apache to run few installers which don't support lighthttpd csg pack. So any tips on how to strengthen firewall to stop ddos attacks ?
|
Add to Favourites 
Print this Article
Also Read
VPSLink Down (Views: 721)
Shared Hosting
Shared Hosting
