New answers tagged ddos
There is almost nothing you can do on your site to defend from DDoS. Essentially when malicious traffic reaches your site it is already too late to do anything. Your best chance to defend yourself is by using third party provider. There are several of them offering different features for different budgets but you could start with Incapsula or Cloudflare.
You can use mod_qos and its QS_SrvMaxConnPerIP to limit how many connections can be made by a given IP address. That can prevent it as long as the attacker isn't using too many different IP addresses. If you have MaxClients of 150 and QS_SrvMaxConnPerIP of 45, they could attack from 3 different IPs and you'd have 15 connections available (150 - (45*3) = ...
Top 50 recent answers are included