mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2025-09-21 22:01:31 +02:00
Code Issues Projects Releases Wiki Activity

DOC: proxy: Add "handshake" timeout documentation.

Browse Source 
Document the "handshake" timeout new setting available one frontend side.
This should at least be helpful for QUIC client connections to prevent
an attacker from refreshing plenty of connections without completing
the handshake step, leading haproxy to consume memory for nothing.
This commit is contained in:
Frédéric Lécaille 2023-11-15 16:06:21 +01:00
parent 373e40f0c1
commit 957085e85d
1 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
doc/configuration.txt
View File

@ -4610,6 +4610,7 @@ timeout check X - X X
timeout client X X X -
timeout client-fin X X X -
timeout connect X - X X
timeout handshake X X X -
timeout http-keep-alive X X X X
timeout http-request X X X X
timeout queue X - X X
@ -14456,6 +14457,19 @@ timeout connect <timeout>
See also: "timeout check", "timeout queue", "timeout server", "timeout tarpit".
timeout handshake <timeout>
Set the maximum time to wait for a client TLS handshake to complete. This is
usable both for TCP and QUIC connections.
May be used in sections : defaults | frontend | listen | backend
yes | yes | yes | no
Arguments :
<timeout> is the timeout value specified in milliseconds by default, but
can be in any other unit if the number is suffixed by the unit,
as explained at the top of this document.
If this handshake timeout is not set, this is the client timeout which is used
in place.
timeout http-keep-alive <timeout>
Set the maximum allowed time to wait for a new HTTP request to appear
May be used in sections : defaults | frontend | listen | backend