DOC: timeout client: pointers to timeout http-request
It worth mentionning "timeout http-request" in the "timeout client"
documentation paragraph, to ensure nobody misses this important setting.
backport: 1.5 and above
(cherry picked from commit 2e1941ec6e0a88a7681883b409b538fbd3dcbba5)
(cherry picked from commit d4a0c4140e81dd21c0c73fcb159be1f2797eb534)
diff --git a/doc/configuration.txt b/doc/configuration.txt
index 8ace9c9..2217aef 100644
--- a/doc/configuration.txt
+++ b/doc/configuration.txt
@@ -7785,8 +7785,10 @@
The inactivity timeout applies when the client is expected to acknowledge or
send data. In HTTP mode, this timeout is particularly important to consider
during the first phase, when the client sends the request, and during the
- response while it is reading data sent by the server. The value is specified
- in milliseconds by default, but can be in any other unit if the number is
+ response while it is reading data sent by the server. That said, for the
+ first phase, it is preferable to set the "timeout http-request" to better
+ protect HAProxy from Slowloris like attacks. The value is specified in
+ milliseconds by default, but can be in any other unit if the number is
suffixed by the unit, as specified at the top of this document. In TCP mode
(and to a lesser extent, in HTTP mode), it is highly recommended that the
client timeout remains equal to the server timeout in order to avoid complex
@@ -7808,7 +7810,8 @@
to use it to write new configurations. The form "timeout clitimeout" is
provided only by backwards compatibility but its use is strongly discouraged.
- See also : "clitimeout", "timeout server", "timeout tunnel".
+ See also : "clitimeout", "timeout server", "timeout tunnel",
+ "timeout http-request".
timeout client-fin <timeout>