I’m trying to create an Apache2 module capable of reacting and mitigating SDDoS attacks (like Slowloris). However, I was unable to find a module hook or a similar method allowing me to parse the incoming client HTTP request asynchronously, thus giving me the option to analyze incoming requests during them arriving to the server (Slowloris purposefully prolongs 1 request and sends it in different chunks with delay). Is this possible? Or can the server only parse whole request to the module?
I have been only able to hook into the process either before a request is incoming or after it has already arrived whole, however I could not find a method allowing me to process the incoming request as it arrives.
Lukáš Brůna is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.