Re: DoS issue

Arvid,

We've run into this problem - I think the upload process will hang the FastCGI 
application, with some limitations.  I don't know how the current code base is 
handling it exactly, but there is a buffer between httpd and FastCGI that works 
on the outgoing side, and there is some sort of buffer on the incoming side.

Some testing would be needed to see exactly how the FastCGI library handles this 
in Apache.

David.

-----

On Wed, 15 Aug 2007, Arvid Picciani wrote:

> my questions have not been answered but the wish to have them answered has
> disapeard suddenly when seeing lighty has a massive security hole in the
> whole POST handling, and they call this NOT A BUG. (something like: it's not
> our problem if the users browser is crap)
>
> i think i'm just going to use apache even if that has some disadvatages.
>
> i assume apache handles post data quiet well? will it lock the fgci
> application during the upload procedure or just wait until the upload
> finished and THEN call the fgci?
>
>
> -- 
> best regards / Mit freundlichen Grüßen
> Arvid Picciani
> --
> DO NOT SEND ME POWERPOINT(tm) OR WORD(tm) DOCUMENTS!
> pdf or any free as in free speech format is fine.
> ___________________________________
> fastcgi-developers mailing list
> http://fastcgi.com/fastcgi-developers/
>

___________________________________
fastcgi-developers mailing list
http://fastcgi.com/fastcgi-developers/