Discover @jclopena Open Source projects

python-down-server

slowdeath - a simple denial of service attack for most PHP-based servers The problem with Apache's approach to dealing with multiple clients, is that there's only ever a limited amount of Client processes available. This is usually is around a few hundred on common webservers. Because of this, it becomes necessary to handle HTTP requests as quickly as possible. As soon as a request is handled, it can go on serving the next. If a client happens to have a slow connection, this can have a direct effect on the scalability of your frontend server. A common way to fight this, is to put a caching server in front of your webserver, such as Varnish or Squid. These webservers are better suited to deal with many clients. This will allow your Apache server to send back HTTP responses quickly to the reverse proxy, and let the proxy deal with sending back the response to the client. However, this doesn't deal with slow requests. Generally, these proxy servers will open connections directly to the backend webserver to avoid having to buffer larger request bodies. Because PHP installations generally use apache 'prefork mpm', the number of possible connections is considerably low. This is also often the case with Fast-CGI based webservers, such as nginx and lighttpd. So if you were to just able to open up a few hundred connections, and drip in the bytes for the request body it would be very easy to take these servers down. To test this theory, I wrote a simple python script that does exactly this, you can grab it from github. To use it, try something like this: python slowdeath.py --threads 200 http://localhost/ In my case my webserver was limited to 150 connections. It took about a second for it to stop serving requests. Big warning: This tool is for research purposes only. Use at your own risk, and only on servers you own.

jclopena

Top repositories