[mod-security-users] Performance using ModSecurity with Apache 1.3.x

[Ivan R. <iv...@we...>]

Some information for those of you using ModSecurity with
Apache 1.3.x:

I have just completed a round of performance tests. As some of
you already know, the regular expression engine that comes
with Apache 1.3.x is much slower than the one that comes with
Apache 2.x (PCRE). When I say slower I mean *several times*
slower for non-trivial requests.

However, today I tried something else: I compiled
ModSecurity for Apache 1.3.x against PCRE instead of the
built-in regex library. I only had a very brief time to
test the result but it appears that everything works
well and the regex execution speed is equal to that of
Apache 2.x.

Chances are I will officially support compilation against
PCRE in the forthcoming 1.9.2.

-- 
Ivan Ristic
Apache Security (O'Reilly) - http://www.apachesecurity.net
Open source web application firewall - http://www.modsecurity.org