Varnish – Find DDOS IP

Someone DDOSing your varnish? Use this to find their IP and ban them!

varnishtop -i TxHeader -I '^X-Forwarded-For:'

Varnish can handle a DDOS/GET pretty fine, but most people don’t have it configured to handle a DDOS/POST.

You can also use “varnishncsa” to view the HTTP URL requests.

Comments are closed.