Re: More on iSeries web apps and security

["Raul A. Jager W." <raul@xxxxxxxxxx>]

If I remember well, the OS will lower the priority of a job (apache)
when it uses to much CPU, so the "database" manager and the
"application" will continue to run (probably slower)

If the web server is saturated by a DDOS attac, the users will not be
able to use the service, even if the application and the database are in 
a differnt computer.

Walden H. Leverich escribió:
> > but it seems to me that the best defence is to stop DDOS attacks at a 
> > network level, using routers and firewalls
>
> No argument, but it depend on the DDOS attack. Fair enough, 50K people
> doing 1/2 opens should be noticed by a _good_ firewall (how many have
> _good_ firewalls?) but what about 50K people issuing valid HTTP requests
> for http://yoursite/fakefile.jsp? Harder to see. Point is, we can come
> up with a response to anything they throw at us (probably), but they
> have to throw it first. Do _you_ want to be the one that says "Gee
> sorry, we didn't think of that"
>
> -Walden