Welcome! Log In Create A New Profile

Advanced

Re: Server hardening without "If" conditions

June 01, 2011 09:02AM
ktm2 Wrote:
-------------------------------------------------------
> On Wed, Jun 01, 2011 at 08:47:48AM -0400, pk899
> wrote:
> > Hi. I notice that nginx with just the location
> rules and usual
> > directives results in mind-blowing performance.
> Apache Bench test shows
> > "115,000 requests per second" can be handled.
> >
> > However, when I add a simple rule:
> >
> > if ($request_method !~ ^(GET|HEAD|POST)$ ) {
> > return 444;
> > }
> >
> > Which I think is important from a point of view
> of getting rid of so
> > much junk that hits any modern server, the
> requests per second fall to
> > "1,200" !!!
> >
> > Is there any way around this? I would, if
> possible, prefer that my main
> > web server be able to handle such basic stuff.
> >
> > Welcome any thoughts. Thanks!
> >
> > Posted at Nginx Forum:
> http://forum.nginx.org/read.php?2,202965,202965#ms
> g-202965
> >
>
> Well, the test you added includes the regular
> expression calculations as well.
> Can nginx use three simpler exact string matches
> instead? It may be faster.
>
> Cheers,
> Ken



Thanks Ken. How would you write this though?

if ($request_method != "GET" and $request_method != "POST" and $request_method != "HEAD") {
return 444;
}

This is not correct syntax?
Subject Author Posted

Server hardening without "If" conditions

pk899 June 01, 2011 08:47AM

Re: Server hardening without "If" conditions

ktm2 June 01, 2011 08:58AM

Re: Server hardening without "If" conditions

pk899 June 01, 2011 09:02AM

Re: Server hardening without "If" conditions

ktm2 June 01, 2011 09:38AM

Re: Server hardening without "If" conditions

edogawaconan June 01, 2011 09:04AM

Re: Server hardening without "If" conditions

Igor Sysoev June 01, 2011 09:14AM

Re: Server hardening without "If" conditions

Thomas Love June 01, 2011 09:26AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 56
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready