Wow, Litespeed is a bad boy against ddos

[felosi]

I finally got to see litespeed battle proven for my needs. My problem lately has been these low bandwidth syn and get floods that get past ddos firewalls and murder apache with less then a 100 or so ips all connecting multiple times. Which if you run apache you will know an attack like this will cripple a server.

So I havent been having much ddos on my current customers because either the ddoser gives up after a while or I gather the ips and give them to botnet hunters who find them and shut them down.

I got this new customer, a russian guy being extorted, So I figured this was a good time to try it out.

Well as soon as dns resolves the crap storm begines, such low bandwdith didnt even trip ddos firewall but was thousands of ips all on apache. I set csf connection tracking low and started letting them get banned. Within the day I checked the server frequently, the load never got over .48 all day which it usually was on 1.5 and higher under normal operation under apache.

Within the day the server banned over 3000 bots twice, had cleared the banlist once as I thought the iptables would trip with that many bans.

Some bandwidth was used but the target site has been up and fast all day under massive attack, ended up with firewall dropping banned ips for a while, steady 2-3 mbit incoming but cant complain.

Litespeed handled this very well and I am gonna put this in all my servers, its perfect for my type of hosting. Will be buying licences for all, as soon as trial runs out of course

Just thought Id give some feedback on how It handles attacks, I think it does so insanely well.