RockCloud-基石云安全-官方博客
How to Determine if It's a Slowloris CC Attack: Don't Just Check access.log
When server response slows down with connection buildup but low bandwidth and QPS, slowloris CC attacks often hide from access.log. This article provides troubleshooting steps starting from connection state, using ss commands, worker usage, and FD curves to locate connection exhaustion, along with layered mitigation strategies for origin limiting and edge buffering.
Nginx Anti-CC Attack Rate Limiting Best Practices: Should You Limit Connections or Requests First?
Discover the best practices for configuring Nginx to defend against CC attacks, combining connection limits, request rate limiting, burst handling, and whitelist exemptions.
