Re: Response code 408

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 05/11/2012 06:01 PM, John Iliffe wrote:
I recently switched from Apache-2.2.14 to Apache-2.4.2.  In the entire time 
we ran 2.2.14 I don't recall seeing a response code 408.  Since we switched 
two weeks ago we average about 30 - 35 a day.  Our server is not heavily 
loaded.

The RFC definition of response code 408 is "Request Timeout, the client did 
not produce a request within the time the server was prepared to wait."

All of these 408's are arising from background (AJAX) requests in the 
browser that are well known to be very short  (16 bytes of data coded as an  
HTTP GET).

Which parameter have I set to short?  Looking at the Apache docs there 
don't seem to be any obvious choices.

As clearly documented, one of the many new modules in 2.4 is mod_reqtimeout, which controls exactly this.

http://httpd.apache.org/docs/2.4/mod/mod_reqtimeout.html

It allows the server administrator to determine on a per-vhost basis how long the request timeout should be, and what the minimum data rate should be.
This was added specifically to combat bots and slowdos attempts.

The defaults - which you did not adjust for your site - are obviously not suited for your small AJAX snippets.

Blind upgrades never go well.

-- 
J.

[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux