Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm trying to set up an apache server that's distinctly vulnerable to the slowloris denial of service so I can test the results, the only problem is that I can't seem to get slowloris to actually work on apache.

What's the best way to make my settings in apache so that it become vulnerable to slowloris?

share|improve this question

closed as off topic by Ben Pilbrow, the-wabbit, Ward, Scott Pack, MadHatter Sep 25 '11 at 21:56

Questions on Server Fault are expected to relate to professional server, networking, or related infrastructure administration within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

    
If there were a vote to close reason for "if you have to ask, you probably shouldn't" I'd vote that. Since there isn't, I'm just saying too localised. –  Ben Pilbrow Sep 25 '11 at 9:59
    
Nah, it should be answerable (and answered) - it just belongs to "security" –  the-wabbit Sep 25 '11 at 12:39
    
Or on security.stackexchange.com - should be possible to vote to close and migrate to there. –  dunxd Sep 25 '11 at 21:52

1 Answer 1

Increase Timeout to allow for a given request to hold a connection longer, and decrease MaxClients to decrease available connections.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.