Server hardening without "If" conditions
Edho P Arief
edhoprima at gmail.com
Wed Jun 1 17:02:57 MSD 2011
On Wed, Jun 1, 2011 at 7:47 PM, pk899 <nginx-forum at nginx.us> wrote:
> Hi. I notice that nginx with just the location rules and usual
> directives results in mind-blowing performance. Apache Bench test shows
> "115,000 requests per second" can be handled.
>
> However, when I add a simple rule:
>
> if ($request_method !~ ^(GET|HEAD|POST)$ ) {
> return 444;
> }
>
> Which I think is important from a point of view of getting rid of so
> much junk that hits any modern server, the requests per second fall to
> "1,200" !!!
>
I'm interested in what way this is important. Especially since nginx
will just return error 400 on bad requests.
More information about the nginx
mailing list