Java Mailing List Archive

http://www.junlu.com/

Home » Home (12/2007) » Apache Tomcat »

RE: Limit Num Requests

Peter Crowther

2006-12-20

Replies:

> From: adamle [mailto:adam@(protected)]
> I thought of maybe putting a filter on the certain url
> pattern that I want,
> but instead of turning back the user, I could put his thread
> to sleep for
> aset amount of time and have him try again. Hopefully by
> then some of the
> earlier threads will have finished and he can be let through.
>
> Do you some inherent problem with this?

I'd always be cautious about consuming any resource for an extended
period - in this case a thread. An attacker could starve Tomcat of
threads by flooding the system with requests for the slow-processing
pages. You probably wouldn't get a crash; you *would* get very slow
service elsewhere.

Is there no way you can hand back a 'try later' response, even using
something tacky like a refresh header?

   - Peter

---------------------------------------------------------------------
To start a new topic, e-mail: users@(protected)
To unsubscribe, e-mail: users-unsubscribe@(protected)
For additional commands, e-mail: users-help@(protected)

©2008 junlu.com - Jax Systems, LLC, U.S.A.