Re: How to protect a Tomcat server/Webapp from (D)DOS attacks

2014-06-18 Thread Lmhelp1
Hello Chris, Thank you for your answer. > Apache ships with mod_evasive that allows you do this. I have used this in the past with some success. The other alternative I am aware of is to use mod_security. It looks interesting. > I am not aware of anything that will run directly in front of

Re: How to protect a Tomcat server/Webapp from (D)DOS attacks

2014-06-17 Thread chris derham
Léa, > Below is what I would like to ask you: > How do you usually protect your "Tomcat" servers and Webapps from (D)DOS > ((Distributed) Denial-of-service) attacks? If you allow the DOS traffic to make it all the way up to the application layer before you detect it, then the DOS will still have

How to protect a Tomcat server/Webapp from (D)DOS attacks

2014-06-17 Thread Lmhelp1
Hello, My question is not really "Tomcat" specific but, as my Webapp is a "Tomcat" Webapp, I thought I should post this question here. Below is what I would like to ask you: How do you usually protect your "Tomcat" servers and Webapps from (D)DOS ((Distributed) Denial-of-service) attacks? A