Bug 1016936

Summary: [GSS](6.4.z) Need post timeout for EAP6
Product: [JBoss] JBoss Enterprise Application Platform 6 Reporter: Hisanobu Okuda <hokuda>
Component: WebAssignee: Rémy Maucherat <rmaucher>
Status: CLOSED NOTABUG QA Contact: Radim Hatlapatka <rhatlapa>
Severity: unspecified Docs Contact: Russell Dickenson <rdickens>
Priority: unspecified    
Version: 6.1.1CC: bmaxwell, jclere, jdoyle, joallen, lywang, wili, yqu
Target Milestone: ---   
Target Release: EAP 6.4.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-02-22 21:45:48 UTC Type: Feature Request
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Hisanobu Okuda 2013-10-09 01:18:20 UTC
Description of problem:
weblogic provides post timeout to prevent DoS [1]. But EAP has no such feature/option.
[1] http://docs.oracle.com/cd/E17904_01/web.1111/e13701/web_server.htm#i1059782

Version-Release number of selected component (if applicable):
EAP 6.x

How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 1 JBoss JIRA Server 2014-09-02 06:14:25 UTC
Stuart Douglas <stuart.w.douglas> updated the status of jira WFLY-3797 to Resolved

Comment 2 Jean-frederic Clere 2014-12-18 16:15:27 UTC
In fact there isn't a specific timeout for POST.
You can use org.apache.coyote.http11.DEFAULT_DISABLE_UPLOAD_TIMEOUT (default = true) and set org.apache.coyote.http11.DEFAULT_CONNECTION_TIMEOUT (default = 60 seconds), then the POST timeout is going to be connection timeout.

Comment 3 Brad Maxwell 2017-02-22 21:45:48 UTC
Closing as this is an RFE, it is implemented in EAP 7 via Undertow WFLY-3797
For EAP 6, use the workaround https://bugzilla.redhat.com/show_bug.cgi?id=1016936#c2