Re: Protecting against slow HTTP POST queries

2016-02-04 Thread Baptiste
On Thu, Feb 4, 2016 at 9:44 AM, Sylvain Faivre wrote: > Hi, > > Is there a timeout setting in HAproxy that can help protect against slow > HTTP POST queries ? > > I'm not talking about "slow loris" type attacks (where the client sleeps > between request headers) but

Re: Protecting against slow HTTP POST queries

2016-02-04 Thread Sylvain Faivre
On 02/04/2016 12:06 PM, Baptiste wrote: On Thu, Feb 4, 2016 at 9:44 AM, Sylvain Faivre wrote: Hi, Is there a timeout setting in HAproxy that can help protect against slow HTTP POST queries ? >> [...] please run the same test against HAProxy 1.6 and enable

Protecting against slow HTTP POST queries

2016-02-04 Thread Sylvain Faivre
Hi, Is there a timeout setting in HAproxy that can help protect against slow HTTP POST queries ? I'm not talking about "slow loris" type attacks (where the client sleeps between request headers) but "slow HTTP POST" (where the client sleeps between POST data lines). Here is an example :