# mod_reqtimeout aktivieren:
sudo a2enmod reqtimeout
# /etc/apache2/conf-enabled/reqtimeout.conf:
RequestReadTimeout header=20-40,MinRate=500 body=20,MinRate=500
# mod_evasive installieren (Anti-DoS):
sudo apt install libapache2-mod-evasive
# /etc/apache2/mods-enabled/evasive.conf:
<IfModule mod_evasive20.c>
DOSHashTableSize 3097
DOSPageCount 2
DOSSiteCount 50
DOSPageInterval 1
DOSSiteInterval 1
DOSBlockingPeriod 60
</IfModule>
sudo systemctl restart apache2
Nginx ist aufgrund seiner Event-basierten Architektur weniger anfaellig. Trotzdem:
# /etc/nginx/nginx.conf:
client_header_timeout 10s;
client_body_timeout 10s;
keepalive_timeout 15s;
send_timeout 10s;
# Rate Limiting:
limit_req_zone zone=req_limit:10m rate=10r/s;
server {
limit_req zone=req_limit burst=20;
}