Our web site has been experiencing a ddos attack for the last 18 hours and we have taken some steps to mitigate it that have helped, including redirecting traffic through CloudFlare.
However, the attack continues and we would like to enable and configure mod_request_timeout and mod_qos as per the following article:
How To Mitigate Slow HTTP DoS Attacks in Apache HTTP Server - Acunetix
I know the modules can be enabled through EasyApache, but it's not clear where/how to edit those config files. Do we put those directives in a pre or post virtual host include for the domain being attacked. Or, could this go into the .htaccess file at the web root of the domain?
However, the attack continues and we would like to enable and configure mod_request_timeout and mod_qos as per the following article:
How To Mitigate Slow HTTP DoS Attacks in Apache HTTP Server - Acunetix
I know the modules can be enabled through EasyApache, but it's not clear where/how to edit those config files. Do we put those directives in a pre or post virtual host include for the domain being attacked. Or, could this go into the .htaccess file at the web root of the domain?