1

I have a list of bots to block, so I was thinking that fail2ban could be a solution until I realized that mod_security would be more efficient in this kind of tasks.

The number of bots is huge, so the file of configuration will contain a long list.

My question is about performance (memory, processor, disk ..etc):

Is having a huge list of bots to block will affect the performance of apache in a site with huge traffic ?

0

Performance should not be problem; check @rbl feature of ModSecurity in combination with local DNS caching which will enable you to keep track of offenders in DNS and utilize that DNS zone as reference when deciding to allow or block some connection.

more on http://jwall.org/docs/jwall-rbld/ch03s03.html

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.