users@glassfish.java.net

Re: glassfish DoS attack test - confirmed

From: Oleksiy Stashok <Oleksiy.Stashok_at_Sun.COM>
Date: Mon, 08 Feb 2010 10:29:38 +0100

Hi,
>> you can decrease time GF waits for incoming connection data by
>> setting upload timeout setting in domain.xml like [1].
>> For sure after decreasing this value you can forget about
>> "telneting" to GF, but it should help with such kind of DoS attacks.
>
> I have some uploads to few servlets, and that usually takes 1-2
> minutes. if i set the upload timeout to such as 1000ms, would that
> mean upload idle time, or upload time in total?
>
> in short would it affect my uploads?
Only if your uploads will be very-very slow (slower than 1b/sec).

WBR,
Alexey.

>
> best,
> -c.b.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: users-help_at_glassfish.dev.java.net
>