mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2025-09-22 14:21:25 +02:00
Code Issues Projects Releases Wiki Activity

DOC: relation between timeout http-request and option http-buffer-request

Browse Source 
The documentation missed the explanation and relation between the
timeout http-request and option http-buffer-request.
Combined together, it helps protecting against slow POST types of
attacks.

[wt: backport to 1.6]
This commit is contained in:
Baptiste Assmann 2015-10-28 13:49:01 +01:00 committed by Willy Tarreau
parent 79c1051cad
commit eccdf43eec
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
doc/configuration.txt
View File

@ -5059,7 +5059,7 @@ no option http-buffer-request
the frontend and the backend, so this should definitely not be used by the frontend and the backend, so this should definitely not be used by
default. default.
See also : "option http-no-delay" See also : "option http-no-delay", "timeout http-request"
option http-ignore-probes option http-ignore-probes
@ -9133,9 +9133,11 @@ timeout http-request <timeout>
code using "option http-ignore-probes" or "errorfile 408 /dev/null". See code using "option http-ignore-probes" or "errorfile 408 /dev/null". See
more details in the explanations of the "cR" termination code in section 8.5. more details in the explanations of the "cR" termination code in section 8.5.
Note that this timeout only applies to the header part of the request, and By default, this timeout only applies to the header part of the request,
not to any data. As soon as the empty line is received, this timeout is not and not to any data. As soon as the empty line is received, this timeout is
used anymore. It is used again on keep-alive connections to wait for a second not used anymore. When combined with "option http-buffer-request", this
timeout also applies to the body of the request..
It is used again on keep-alive connections to wait for a second
request if "timeout http-keep-alive" is not set. request if "timeout http-keep-alive" is not set.
Generally it is enough to set it to a few seconds, as most clients send the Generally it is enough to set it to a few seconds, as most clients send the
@ -9150,7 +9152,7 @@ timeout http-request <timeout>
timeout will be used. timeout will be used.
See also : "errorfile", "http-ignore-probes", "timeout http-keep-alive", and See also : "errorfile", "http-ignore-probes", "timeout http-keep-alive", and
"timeout client". "timeout client", "option http-buffer-request".
timeout queue <timeout> timeout queue <timeout>