For interest: Bugzilla performance

[Myk Melez]

Bradley Baetz wrote:

>On Wed, 6 Nov 2002, Myk Melez wrote:
>
>  
>
>>Note also that emails sometimes mention multiple killed queries, 
>>especially when the queries are generated by a DOS attack.
>>
>>We stopped a DOS attack last Wednesday evening, not the first we've 
>>dealt with in the last month, and that may have skewn results both 
>>before and afterwards.
>>    
>>
>
>Potential project for interested people - hack mod_throttle to allow
>whitelisting ip blocks ;) (Does mod_throttle catch anyone anymore, since
>the limit was raised to deal with NSCP's NATed connections?)
>
No, mod_throttle is now completely ineffective, since Netscape NATs 
everyone coming through the firewall to a single IP address.  I asked 
the author of mod_throttle about whitelisting, and he said it'll happen 
in versioni 4, due out sometime (this seemed to be later than sooner).

Fortunately, however, John Dee has agreed to work on a script that 
accomplishes what mod_throttle does except that it creates permanent 
bans and honors a whitelist, so we should have better defenses against 
these attacks soon.

-myk