3 ms·
Apache needs slowloris mitigation, and a dozen other tweaks to get it secure (mpm-itk, fail2ban rules, and anti-spammer mods etc.) It can be good, but most peop
by Joel_Mckay 3y ago
Apache needs slowloris mitigation, and a dozen other tweaks to get it secure (mpm-itk, fail2ban rules, and anti-spammer mods etc.) It can be good, but most people run the vanilla install. Sometimes it is the only solution... ;-)
However, Nginx gets over 20% more concurrent users per host... Hence the main reason people put up with its lack of features and silly HA design.
Forks can be healthy, but it usually quickly degrades into a competition for users.
Hope everyone has fun =)
- yjftsjthsd-h 3y agoEr, does nginx have some fail2ban built-in? Because it really sounds like that's apples-to-oranges.
- Joel_Mckay 3y agoApache on the web is constantly probed for remote exploits, and it requires more preemptive precautions. These issues go well beyond the standard checks for bad bot traffic. You are correct in that many of the CVEs were not technically Apache itself, but rather supporting libraries and old mods. Best of luck =)
- RedShift1 3y agoObviously other webservers are also continuously being probed..