IIS slow attach limits

Aleks
Aleks used Ask the Experts™
on
I have read this:  http://www.iis.net/configreference/system.applicationhost/sites/sitedefaults/limits

What are the limits that are recommended to avoid slow attacks for:

1) connectionTimeout
2) maxBandwidth
3) maxConnections
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2011
Commented:
You can be a better judge for these default values, reason I am saying this is you would need to monitor your network and calculate average bandwidth, no of connection utilized based on flow of traffic.

For e.g.
10000 request / second [maxConnections] + 100 KB transfer / request = 0.95 GB / sec [maxBandwidth]
(Now this is just an example, if you have average website with static page your bandwidth / page will be 2 - 20KB / request or even smaller than that)

Again these are suggestive values which you will have to make sure on your side based on your website traffic flow.


On DoS topic you can also setup "Dynamic IP Restrictions Extension" which can also help to block Denial of Service Attacks.

http://www.iis.net/downloads/microsoft/dynamic-ip-restrictions

Author

Commented:
Thank you .

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial