<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html><head> <meta content="text/html; charset=utf-8" http-equiv="Content-Type"> </head>IMHO,<br/>I have a bad experience using csf for a high traffic website. <br/><p>
<br/>Best Regards,<br/><br/>Glen Lumanau<br/></p><hr/><div><b>From: </b> Chris Zimmerman <fud.theturtle@gmail.com>
</div><div><b>Date: </b>Fri, 9 Oct 2009 23:02:16 -0400</div><div><b>To: </b><nginx@sysoev.ru></div><div><b>Subject: </b>Re: DDoS Attack Log Analysis Question</div><div><br/></div>Need a larger vps? Lol <br>If it's virtuozzo (perhaps Xen though I don't have a lot of experience that that) your going to hit open file limits put on the instance as well. Even with sophisticated software based firewalls you can hit arbitrary iptable entry limits as well. <br>
<br>csf has a portflood feature that works fairly well that uses the ipt_recent module<br>or there are connection based monitors such as dos-deflate for firewalling ip's that reach connection thresholds.<br><br>Though really you connection limit was probably the biggest issue. I could see nginx handling simple requests like that no sweat if you have caching enabled. <br>
</html>