Commit 654477c0 authored by Jérome Perrin's avatar Jérome Perrin

component/apache: enable mod_reqtimeout

quoting https://en.wikipedia.org/wiki/Slowloris_(computer_security) :

> Since Apache 2.2.15, Apache ships the module mod_reqtimeout as the
> official solution supported by the developers

From https://httpd.apache.org/docs/2.4/mod/mod_reqtimeout.html
default is header=20-40,MinRate=500 body=20,MinRate=500
which seem to be good default.
parent 92131e9c
......@@ -102,6 +102,7 @@ LoadModule rewrite_module modules/mod_rewrite.so
LoadModule headers_module modules/mod_headers.so
LoadModule deflate_module modules/mod_deflate.so
LoadModule filter_module modules/mod_filter.so
LoadModule reqtimeout_module modules/mod_reqtimeout.so
AddOutputFilterByType DEFLATE text/cache-manifest text/html text/plain text/css application/hal+json application/json application/x-javascript text/xml application/xml application/rss+xml text/javascript image/svg+xml application/x-font-ttf application/font-woff application/font-woff2 application/x-font-opentype
......
......@@ -14,5 +14,5 @@
# not need these here).
[template-apache-backend-conf]
filename = apache-backend.conf.in
md5sum = 3b430ca726a2707e1b6a2ae41a6c8e21
md5sum = aaa2a9ea1de045597518fb416469535a
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment