Re: More on iSeries web apps and security

If I remember well, the OS will lower the priority of a job (apache)
when it uses to much CPU, so the "database" manager and the
"application" will continue to run (probably slower)

If the web server is saturated by a DDOS attac, the users will not be
able to use the service, even if the application and the database are in a differnt computer.

Walden H. Leverich escribió:

but it seems to me that the best defence is to stop DDOS attacks at a network level, using routers and firewalls

No argument, but it depend on the DDOS attack. Fair enough, 50K people
doing 1/2 opens should be noticed by a _good_ firewall (how many have
_good_ firewalls?) but what about 50K people issuing valid HTTP requests
for http://yoursite/fakefile.jsp? Harder to see. Point is, we can come
up with a response to anything they throw at us (probably), but they
have to throw it first. Do _you_ want to be the one that says "Gee
sorry, we didn't think of that"

-Walden