Why the heck do web servers STILL crash when DDoSed?

[Guden Oden]

It's insane. It's like hanging windows by clicking the mouse buttons fast enough, it makes no sense. Why don't they just start rejecting packets when buried under a mountain of requests rather than CRASHING?

It's completely unacceptable that web server software is still so unstable and easy to bring down. Particulary these days when the armies of zombie PCs number in the tens of thousands.

 

[mito]

forjed packets?

a slight differnce.

 

[nutball]

Do they crash? Or just slow down to a crawl? What crashes, the software or the hardware? Surely it's not up to the HTTP daemon to reject packets when subjected to a flood, it should at the very least be down the to TCP/IP stack in the operating system, or better yet the routers that the server plugs in to.