tree 2870efdcefb5e150c70f4947f560acbe29d4742e
parent a0250ba38da12775bcc829b13c063aa4e5e37b25
author Willy Tarreau <w@1wt.eu> 1199622280 +0100
committer Willy Tarreau <w@1wt.eu> 1199622280 +0100

[MEDIUM] introduce "timeout http-request" in frontends

In order to offer DoS protection, it may be required to lower the maximum
accepted time to receive a complete HTTP request without affecting the client
timeout. This helps protecting against established connections on which
nothing is sent. The client timeout cannot offer a good protection against
this abuse because it is an inactivity timeout, which means that if the
attacker sends one character every now and then, the timeout will not
trigger. With the HTTP request timeout, no matter what speed the client
types, the request will be aborted if it does not complete in time.