IIS Server Security - HELP - Limit connections per IP in IIS6

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > June 2007 > HELP - Limit connections per IP in IIS6





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author HELP - Limit connections per IP in IIS6
sitemaster

2007-06-18, 1:24 pm

We are running a large website on Server 2k3 and IIS6 and we are having a
huge problem.

We have some users that are browsing our site from behind what appears to be
a proxy server and when they visit the index page of the site (which has
over 100 inside links) the proxy server attemps to open a connection to each
and every link at the same time (from the same IP address)

Is there a way in IIS that anyone knows of to limit how many simultaneous
connections can be allowed per IP address

We already set the connection timeout to 15 seconds and max 150 connections
in the website properties.

Thanks in advance


Bernard Cheah [MVP]

2007-06-19, 1:18 am

Nope. not natively via IIS. and this is bad to those users behind proxy
connection.


--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"sitemaster" <sitemaster@earthlink.net> wrote in message
news:4676ac86$0$30524$c3e8da3@news.astraweb.com...
> We are running a large website on Server 2k3 and IIS6 and we are having a
> huge problem.
>
> We have some users that are browsing our site from behind what appears to
> be a proxy server and when they visit the index page of the site (which
> has over 100 inside links) the proxy server attemps to open a connection
> to each and every link at the same time (from the same IP address)
>
> Is there a way in IIS that anyone knows of to limit how many simultaneous
> connections can be allowed per IP address
>
> We already set the connection timeout to 15 seconds and max 150
> connections in the website properties.
>
> Thanks in advance
>



sean

2007-06-19, 7:21 am

IMHO, what you can do is place your webserver behind a reverse proxy,
and let the proxy control the limit on number of simultaneous
connection. You can try SafeSquid. It has a feature called 'Limit',
which can be used to control - no. of requests, download transfer,
upload transfer and QoS.

Cheers!

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com