Check: WG110 A22
APACHE SITE 2.0 for Unix:
WG110 A22
(in version v1 r5)
Title
The number of allowed simultaneous requests must be set. (Cat II impact)
Discussion
Resource exhaustion can occur when an unlimited number of concurrent requests are allowed on a web site, facilitating a denial of service attack. Mitigating this kind of attack will include limiting the number of concurrent HTTP/HTTPS requests per IP address and may include, where feasible, limiting parameter values associated with keepalive, (i.e., a parameter used to limit the amount of time a connection may be inactive).
Check Content
To view the MaxKeepAliveRequests value, enter the following command: grep "MaxKeepAliveRequests" /usr/local/apache2/conf/httpd.conf If the returned value of MaxKeepAliveRequests is not set to 100 or greater, this is a finding.
Fix Text
Edit the httpd.conf file and set the MaxKeepAliveRequests directive to 100 or greater.
Additional Identifiers
Rule ID: SV-33018r1_rule
Vulnerability ID: V-2240
Group Title: WG110
Expert Comments
CCIs
Number | Definition |
---|---|
No CCIs are assigned to this check |
Controls
Number | Title |
---|---|
No controls are assigned to this check |