Stopping DOS Attacks - Methods?

Easy...

onapplicationstart -> application.pendingrequests = arrayNew(2) {sessionid + time};

onrequeststart -> find an element in the application array that match the sessionid of the user and where time is < than X seconds (or milliseconds) than now()

if none is found, return true (go ahead) else call whatever function that returns getLost(for x seconds) to user...

rmajoran wrote:
> Does anyone have any helpful tips on stopping Denial of Service attacks. What
> is mean is this --
>
> If someone sits there in their browser and hits REFRESH 100 times on a page
> that requires a lot of database interactivity, it can bring down your server
> pretty quick. ColdFusion connections sit in a queue and keep running and
> running and running.
>
> Is there a way that if someone hits REFRESH on a page, that it stops the query
> that is running and starts it again for that user?
>
> Looking forward to some thoughts on this.
>
> Sincerely,
> Ray
>


Make use of data and response caching techniques so that the page does
not need to be completely re-built for each and every identical request.

Make use of form validation that prevents the resubmitting of forms.

Make use of web server and|or router techniques that mitigate DOS type
attacks.