Welcome! Log In Create A New Profile

Advanced

Re: Server hardening without "If" conditions

Thomas Love
June 01, 2011 09:26AM
On 1 June 2011 15:13, Igor Sysoev <igor@sysoev.ru> wrote:
> On Wed, Jun 01, 2011 at 08:47:48AM -0400, pk899 wrote:
>> Hi. I notice that nginx with just the location rules and usual
>> directives results in mind-blowing performance. Apache Bench test shows
>> "115,000 requests per second" can be handled.
>>
>> However, when I add a simple rule:
>>
>>     if ($request_method !~ ^(GET|HEAD|POST)$ ) {
>>       return 444;
>>     }
>>
>> Which I think is important from a point of view of getting rid of so
>> much junk that hits any modern server, the requests per second fall to
>> "1,200" !!!

How scientific is that test? Is 115,000 requests per second an
expected baseline performance? Did anything else change between tests?

And as someone else suggested, this is not really something you should
have to do in nginx in any case. It's like closing ports you don't
use. If your system is secure there's no need. If your system isn't
secure it won't help.

Thomas

_______________________________________________
nginx mailing list
nginx@nginx.org
http://nginx.org/mailman/listinfo/nginx
Subject Author Posted

Server hardening without "If" conditions

pk899 June 01, 2011 08:47AM

Re: Server hardening without "If" conditions

ktm2 June 01, 2011 08:58AM

Re: Server hardening without "If" conditions

pk899 June 01, 2011 09:02AM

Re: Server hardening without "If" conditions

ktm2 June 01, 2011 09:38AM

Re: Server hardening without "If" conditions

edogawaconan June 01, 2011 09:04AM

Re: Server hardening without "If" conditions

Igor Sysoev June 01, 2011 09:14AM

Re: Server hardening without "If" conditions

Thomas Love June 01, 2011 09:26AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 165
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready