logo
Apache Lounge
Webmasters

 

About Forum Index Downloads Search Register Log in  RSS Apache Lounge  


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.



Post new topic   Forum Index -> Third-party Modules View previous topic :: View next topic
Reply to topic   Topic: mod_reqtimeout: Minimum value for request header timeout
Author
GenericApacheUser



Joined: 11 Apr 2018
Posts: 1

PostPosted: Wed 11 Apr '18 18:14    Post subject: mod_reqtimeout: Minimum value for request header timeout Reply with quote

Hi,

I am using apache 2.4.25 which is vulnerable for slowhttp DOS attack. So while trying to mitigate this, found that mod_reqtimeout provides a way to specify timeouts.
For example, RequestReadTimeout header=X-Y,MinRate=Z body=X-Y,MinRate=Z. With header time out set to 1 sec i dont see DOS attack.

My questions are,
1. What are the implications of setting a request header timeout as 1 sec? Is it very small number?
2. Is there a better way to overcome slowhttp attack?
Back to top


Reply to topic   Topic: mod_reqtimeout: Minimum value for request header timeout View previous topic :: View next topic
Post new topic   Forum Index -> Third-party Modules