Skip to content

Integrate apache mod reqtimeout to foil slowloris-like attacks etc #139

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jonasbardino merged 2 commits into from
Feb 9, 2026
Merged

Integrate apache mod reqtimeout to foil slowloris-like attacks etc #139

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
0915b31
Integrate apache mod reqtimeout to foil slowloris-like attacks and in…
jonasbardino Jan 23, 2026
41fb50d
Just a bit of spelling to cover 'slowloris'.
jonasbardino Jan 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion .spellcheck-wordlist.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -366,4 +366,6 @@ HTML
html
balancer
JupyterHub
SSLProxyCACertificateFile
SSLProxyCACertificateFile
ANTISLOWLORIS
slowloris
3 changes: 3 additions & 0 deletions Dockerfile.rocky9
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -128,6 +128,7 @@ ARG TWOFACTOR_AUTH_APPS=""
ARG ENABLE_PEERS=True
ARG ENABLE_QUOTA=False
ARG ENABLE_ACCOUNTING=False
ARG ENABLE_ANTISLOWLORIS=False
ARG PEERS_MANDATORY=False
ARG PEERS_EXPLICIT_FIELDS=""
ARG PEERS_CONTACT_HINT="authorized to invite you as peer"
Expand Down Expand Up @@ -1033,6 +1034,7 @@ ARG TWOFACTOR_AUTH_APPS
ARG ENABLE_PEERS
ARG ENABLE_QUOTA
ARG ENABLE_ACCOUNTING
ARG ENABLE_ANTISLOWLORIS
ARG PEERS_MANDATORY
ARG PEERS_EXPLICIT_FIELDS
ARG PEERS_CONTACT_HINT
Expand Down Expand Up @@ -1247,6 +1249,7 @@ RUN ./generateconfs.py --source=. \
--gdp_id_scramble=${GDP_ID_SCRAMBLE} --gdp_path_scramble=${GDP_PATH_SCRAMBLE} \
--enable_quota=${ENABLE_QUOTA} --quota_backend="${QUOTA_BACKEND}" \
--quota_update_interval=${QUOTA_UPDATE_INTERVAL} \
--enable_antislowloris=${ENABLE_ANTISLOWLORIS} \
--quota_user_limit=${QUOTA_USER_LIMIT} --quota_vgrid_limit=${QUOTA_VGRID_LIMIT} \
--enable_accounting=${ENABLE_ACCOUNTING} --accounting_update_interval=${ACCOUNTING_UPDATE_INTERVAL} \
--storage_protocols="${STORAGE_PROTOCOLS}" \
Expand Down
3 changes: 3 additions & 0 deletions doc/source/sections/configuration/variables.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -440,6 +440,9 @@ Variables
* - ENABLE_ACCOUNTING
- False
- Enable additional storage accounting daemon and integration in the user pages.
* - ENABLE_ANTISLOWLORIS
- False
- Enable additional request timeout integration in apache to help foil slowloris-like attacks and drop resource hogging clients.
* - ENABLE_GDP
- False
- Enable GDP mode for sensitive data with a lot of restrictions on access and logging
Expand Down