Using mod_evasive behind a NodeBalancer

Can anyone point me to the best way to run mod_evasive behind a NodeBalancer? I'm finding different recommendations, including mod_rpaf / mod_remoteip, and also modevasive_x, but nothing that specifies which route will be most effective.

Our servers are running Apache 2.4.43 on Ubuntu 16.04.

I'm not very familiar with mod_evasive, but our server had a major traffic spike last week and so we are trying to harden things up.

Any suggestions would be greatly appreciated.

Thank you in advance.

1 Reply

Hey there -

I'm happy to try to get you pointed in the right direction. We have a great guide on configuring mod_evasive with Apache:

Guides Apache Tips & Tricks mod_evasive on Apache Configure mod_evasive to Help Survive DoS/DDoS Attacks

As I'm not familiar with your configuration, I'm reluctant to recommend anything specifically outside of that guide - but I think that should be a good start from you.

I've also added some tags to this post to give it some more visibility so other users who might see this can stop by with their recommendations.


Please enter an answer

You can mention users to notify them: @username

You can use Markdown to format your question. For more examples see the Markdown Cheatsheet.

> I’m a blockquote.

I’m a blockquote.

[I'm a link] (

I'm a link

**I am bold** I am bold

*I am italicized* I am italicized

Community Code of Conduct