On Fri, Oct 23, 2009 at 7:28 AM, Stefan <stefan@chehalispost.com> wrote:
Hello all, I was recently looking at different ways to switch our web
application written in Lua from apache to nginx (we are currently using
mod_wombat *in production* to earn a living).
I wouldn't use mod_wombat in production at the moment, it can be
vulnerable to DoS attack because the size of the request body that is
read is not limited and could fill the memory. It should use apreq2
instead of trying to do request parsing by itself. And there is no
easy way to limit and control how server resources are used (max
execution time, memory limit, ...).
