On Thu October 8 2009 8:06:48 pm Mustafa Sezgin wrote: > > We are setting up some Rest services which will be accepting multi part > msgs. Something I have noticed is that there is a potential for a DoS > attack in the even that multipart msgs do not end with a proper boundary. > It seems the connection remains used for a long period of time. Is there > anyway to tell CXF to timeout if no activity has occurred on the > connection after a certain period of time or is this something that CXF > leaves to the container or OS being used?
This definitely is something that the servlet container would normally have to provide. From our standpoint (and servlet spec) we just have an input stream that we read from. If it blocks to wait for network IO, that's definitely something the servlet container would be dealing with. :-( Dan > > > > Thanks > > > > Mustafa > -- Daniel Kulp [email protected] http://www.dankulp.com/blog
