Attack description and analysis: http://www.cs.unc.edu/~jeffay/courses/nidsS05/attacks/TCP-shrew.pdf http://www.cs.unc.edu/~jeffay/courses/nidsS05/attacks/TCP-s

Attack description and analysis: http://www.cs.unc.edu/~jeffay/courses/nidsS05/attacks/TCP-shrew.pdf http://www.cs.unc.edu/~jeffay/courses/nidsS05/attacks/TCP-sh... I agree with andrewcooke, it doesn't seem to be a problem of nginx or apache. OS TCP implementation should be modified to handle this type of attacks.