tech-net archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: TCP connections clogging up accf_http(9)



> In the case of a server that is broken, and not accepting connections, that's
> also clearly what is needed.
But without an Accept Filter, those connection requests would also just fill the queue?

> it should also allow it to decide between reject and accept old pending 
> connections - in case it wants to log them, or take more drastic counter 
> measures in the event it appears as if it might be an actual attack attempt
Yes.

I thing tls@'s approach would make all this possible at no cost, wouldn't it?


Home | Main Index | Thread Index | Old Index