[users@httpd] Queries regarding limits for header and body components to RequestReadTimeout!

["Dalei, Pabitra Mohan" <da...@hpe.com>]

Hi,

We are trying to code a feature that lets the user configure inputs to RequestReadTimeout in httpd.conf. This is done to mitigate slowrosis attacks. We are trying to decide the upper limits of body (bodyMin, bodyMax and BodyRate) and header(headerMin, headerMax and headerRate). Could not find anything conclusive over Web or even in the apache documentations available. Could you please let us know any information on this?

Thanks in advance for your help!


Warm Regards,
Pabitra




Sensitivity: Internal & Restricted