Question

亚马逊是否计划将mov_evasive添加到其最新的AMI？
我如何在Amazon Linux上安装mod_evasive？有网上提供了不少教程，但我发现没有最近的教程解决了亚马逊Linux。
亚马逊是否有关于如何保护EC2的建议针对DDoS攻击的实例？亚马逊，我真的很感激可以提供有关如何保护EC2实例的某种指导通过使用开源防火墙和运行Apache和WordPress Apache模块，如mod_security和mod_evasive。

我尝试安装：

sudo yum --enablerepo=epel install mod_evasive

Loaded plugins: priorities, update-motd, upgrade-helper
amzn-main                                                | 2.1 kB     00:00     
amzn-updates                                             | 2.5 kB     00:00     
1034 packages excluded due to repository priority protections
Resolving Dependencies
--> Running transaction check
---> Package mod_evasive.x86_64 0:1.10.1-10.el6 will be installed
--> Processing Dependency: httpd-mmn = 20051115 for package: mod_evasive-1.10.1-10.el6.x86_64
--> Running transaction check
---> Package httpd.x86_64 0:2.2.34-1.16.amzn1 will be installed
--> Processing Dependency: httpd-tools = 2.2.34-1.16.amzn1 for package: httpd-2.2.34-1.16.amzn1.x86_64
--> Processing Dependency: apr-util-ldap for package: httpd-2.2.34-1.16.amzn1.x86_64
--> Running transaction check
---> Package apr-util-ldap.x86_64 0:1.5.4-6.18.amzn1 will be installed
---> Package httpd-tools.x86_64 0:2.2.34-1.16.amzn1 will be installed
--> Processing Conflict: httpd24-2.4.27-3.75.amzn1.x86_64 conflicts httpd < 2.4.27
--> Processing Conflict: httpd24-tools-2.4.27-3.75.amzn1.x86_64 conflicts httpd-tools < 2.4.27
--> Finished Dependency Resolution
Error: httpd24-tools conflicts with httpd-tools-2.2.34-1.16.amzn1.x86_64
Error: httpd24 conflicts with httpd-2.2.34-1.16.amzn1.x86_64
You could try using --skip-broken to work around the problem
You could try running: rpm -Va --nofiles --nodigest

rpm -qa 'httpd*'
httpd24-tools-2.4.27-3.75.amzn1.x86_64
httpd24-2.4.27-3.75.amzn1.x86_64

如何在Amazon ami linux上修复此问题？

Answer 1

如果您正在运行Apache 2.4，请尝试yum install mod24_ssl.x86_64

Answer 2

我通过此网址https://github.com/shivaas/mod_evasive

解决了这个问题

下载此文件 https://raw.githubusercontent.com/shivaas/mod_evasive/master/mod_evasive24.c 进入您的服务器
运行$ APACHE_ROOT / bin / apxs -i -a -c mod_evasive24.c
该模块将构建并安装到$ APACHE_ROOT / modules中，并加载到您的httpd.conf
重启Apache

也许在安装mod_evasive24之前需要安装一些软件：httpd24-dev，libtool，python-devel

Answer 3

感谢后续行动，Erkin;这非常有帮助！

另外两个提示：

要使用apxs，您需要按照https://stackoverflow.com/a/37528944/1776044中的说明安装httpd24-devel。
This helpful comment建议修改mod_evasive（test.pl）的测试脚本，以防它返回所有HTTP 400：

第13行： print $SOCKET "GET /?$_ HTTP/1.0\r\nHost: 127.0.0.1\r\n\r\n";

如何在Amazon Linux ami

3 个答案: