Re: More on iSeries web apps and security

["Walden H. Leverich" <WaldenL@xxxxxxxxxxxxxxx>]

> So that a single Web/Application/Database server might be positioned
behind any number 
> of private network segments, using separate routers, and achieving the
same 
> effect - security wise.

And the effect of DDOS attacks? Sure, maybe your pipe will fill up long
before you start maxing out connections to the 400. But even a 400 isn't
going to like 500,000 IP connection requests per second... and don't
forget, they're br0ken requests, so the TCP handshake is only half
complete so the 400 needs to wait to see if finish. If I'm on a separate
machine then I'm good (machine is down, but backend isn't), if I'm on
one machine/card, well...

Remember, security isn't about defending against what's _likely_ to
happen, it's about defending against what's unlikely to happen. It's not
likely that our house will be broken into today, but we still lock the
doors when we leave. 

-Walden