Hey there.

My Apache server is getting for many days a massive amount of requests on a particular repository, which kills it (due to maximum workers limit passed). I've deactivated the repository and I'm banning IPs still trying to access it, and in less than an hour I have already ~17000 unique IPs banned.

That really looks like a DDoS even if I have no idea why somebody would attack my server.

How can I deal with that? Note that I don't want to use Cloudflare.

TIA

#askfedi #admin #ddos

Unknown parent

mastodon - Link to source

Goffi

@daniel yeah, thinking about it, but I'm not sure about consequences on accessibility. Also in this case I'm still having requests when I've blocked the URL, it's returning 403 (but still creating workers, which at the end block Apache).

I may have to move to NGINX, it should handle better this kind of things.

⇧