Skip to content

Make ProxyHeaderTimeout configurable

Igor Drozdov requested to merge id-fix-proxy-header-timeout into main

Related issue: Issue: #576 (closed)

ProxyHeaderTimeout must be small to avoid DoS risk. Let's make the value configurable and 500ms by default.

As a prerequisite to this change, let's allow a duration to be specified in the config:

  • If an integer is specified, we assume that these are seconds. It's a safer approach to avoid accidentally specifying a very small value (nanoseconds are assumed by default)
  • A duration of format 500ms, 10s, 1m, etc... accepted

This change is backward compatible with the current usage (seconds are assumed by default).

Merge request reports