mod_evasive and HTTP/2

[SPDTeam]

I've after some advice on using mod_evasive along with HTTP/2 and mod_mpm_event.

The server primarily hosts WordPress sites, and I've found the standard mod_evasive config causes issues, especially when logged into WordPress. Blocking individual files with 404s.

I've set DOSPageCount to 12, and DOSSiteCount to 200, which has mitigated the problem a bit. But it still occasionally happens depending on the situation.

Has anyone also found and solved this problem, and if so, how? I'm not even sure if my settings make the module useless.

 

[cPRex]

Hey there! The module can cause odd behavior for sure, especially with CMS software where there are often many requests to the web server on each individual page. This is just one of the reasons that package isn't included with the default configuration.

I don't have much other advice than to say it just might not be the ideal solution for your particular system.