Slow HTTP Denial of Service Attack Vulnerability solution, denialattack

Slow HTTP Denial of Service Attack Vulnerability solution, denialattack

Question Name:	Slow HTTP Denial of Service Attack
Problematic URL	Http: // 10. 238. *. *: 58 ***
Risk Level:	High
Problem type:	Server Configuration
Vulnerability description:	When using http post: POST, specify a very large Content-length, and then send packets at a very low speed, such as sending a byte within 10-S, hold the connection to continue opening. In this way, when the client connection is too large, all available webserver connections are occupied, resulting in DOS.
Solution:	Limit the maximum http header transmission license time of the web server to 20 seconds.
Phase Off Internal Capacity	Solution: Find the file server. xml under tomacat and find the following information,   The original value is 20000, and the value is changed to 20. Restart the service.

From: gs-utrapower-zyr time: 20150602