users@glassfish.java.net

Re: How to configure GlassFish to protect the server against slowloris attacks?

From: Cam Bazz <cambazz_at_gmail.com>
Date: Sat, 6 Feb 2010 23:29:24 +0200

Hello,

I am wondering the same question myself, because I have been having
glassfish slowdowns/hangups that I can not seem to reproduce in lab
setup. I have tried everything and could not solve it for a week
almost. One of the scenarios is an attack.

Is there a way to limit this?

Best,

On Wed, Feb 3, 2010 at 2:11 PM, <glassfish_at_javadesktop.org> wrote:
> What would be the recommended way to configure the GlassFish server (I'm using version 3) against scripts like the slowloris perl script?
>
> I only found an article that show the way for Sun's Web Server (http://planets.sun.com/webserver/group/blogs/), but what about GlassFish?
>
> Is there an equivalent in GlassFish to Sun's Web Server server.xml parameters like the following?? :
>
> <http>
>  <io-timeout>15</io-timeout>
>  <request-header-timeout>5</request-header-timeout>
>  <request-body-timeout>5</request-body-timeout>
> </http>
>
> Thanks in advance
> [Message sent by forum member 'alecaste' (alecaste_at_hotmail.com)]
>
> http://forums.java.net/jive/thread.jspa?messageID=384470
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: users-help_at_glassfish.dev.java.net
>
>