How To Save Your Apache Server From DoS Attack

One big challenge about operating a website is experiencing the hacking incidences. Sometimes the hackers may even simply try to make you off-line. The best way to protect apache web server from DoS attack is by using mod evasive Apache module. The mod evasive apache module offers an evasive action incase of a HTTP DoS or brute force attack. The module can function as network management and detection device. You can configure mod evasive apache module to operate in ipchains, routers, firewalls etc.
It performs the detection function by keeping a hash table of URLs and IP addresses. It rejects single IP addresses from the following :

• Demanding a similar page for several times in one second.
• Making any demands on blocking lists.
• Making above 50 simultaneous demands on the same page in a second.

The method proves to be efficient on both distributed and single sever scripts. However, it may only be ideal to a point of processor and bandwidth consumption. You therefore ought to ensure integration with firewalls and routers for utmost protection. The module contains built-in clean up devices. The module design allows using the tool without causing harm to the user. It is very simple to install in your web server and use.

How to install mod evasive apache module :

• Browse over the internet to download the evasive module to your web server.
• Run the apxs apache command on the mod evasive module and install to your httpd.conf file.
• Make a set up for the configuration file.

Apache do not usually have a firewall. You can create access to the firewall programs to enable it to perform the firewall blocking. Apache access to the firewall program is normally through the sudo and visudo for multi server.
Some systems can allow for three or more connections on a single page for about three seconds. A system may function to avoid both forbidden responses and completely stopping traffic through iptables. After carrying out the process, server load returns to normal in less than a minute.

DoS attacks come in various types and sizes. You can use a mod qos Apache module that contains tune connections to particular pages. You may have to use a hardware-based resolution for extreme Dos attacks. One of them includes using hardware firewall and load balancers. It is important to choose the protections device depending on the work that you intend it to perform.