]> git.kaiwu.me - haproxy.git/commit
[MEDIUM] introduce "timeout http-request" in frontends
authorWilly Tarreau <w@1wt.eu>
Sun, 6 Jan 2008 12:24:40 +0000 (13:24 +0100)
committerWilly Tarreau <w@1wt.eu>
Sun, 20 Jan 2008 22:43:28 +0000 (23:43 +0100)
commit5a14f18f500cbc8c1bba9c042868f3b8a0a307b7
treef2c4d68e7fd0c98f624373a7489b355c7d4e9d00
parent544c4cca695d97c593d11ef9abc89cc0d5a7c1c8
[MEDIUM] introduce "timeout http-request" in frontends

In order to offer DoS protection, it may be required to lower the maximum
accepted time to receive a complete HTTP request without affecting the client
timeout. This helps protecting against established connections on which
nothing is sent. The client timeout cannot offer a good protection against
this abuse because it is an inactivity timeout, which means that if the
attacker sends one character every now and then, the timeout will not
trigger. With the HTTP request timeout, no matter what speed the client
types, the request will be aborted if it does not complete in time.
doc/configuration.txt
include/types/proto_http.h
include/types/proxy.h
src/cfgparse.c
src/client.c
src/proto_http.c
src/proxy.c
tests/test-timeout.cfg