users@glassfish.java.net

How to configure GlassFish to protect the server against slowloris attacks?

From: <glassfish_at_javadesktop.org>
Date: Wed, 03 Feb 2010 04:11:10 PST

What would be the recommended way to configure the GlassFish server (I'm using version 3) against scripts like the slowloris perl script?

I only found an article that show the way for Sun's Web Server (http://planets.sun.com/webserver/group/blogs/), but what about GlassFish?

Is there an equivalent in GlassFish to Sun's Web Server server.xml parameters like the following?? :

<http>
  <io-timeout>15</io-timeout>
  <request-header-timeout>5</request-header-timeout>
  <request-body-timeout>5</request-body-timeout>
</http>

Thanks in advance
[Message sent by forum member 'alecaste' (alecaste_at_hotmail.com)]

http://forums.java.net/jive/thread.jspa?messageID=384470