Check: WG110 A24
Apache Site 2.4 Unix:
WG110 A24
(in version v1 r1)
Title
The number of allowed simultaneous requests must be set. (Cat II impact)
Discussion
Resource exhaustion can occur when an unlimited number of concurrent requests are allowed on a web site, facilitating a denial of service attack. Mitigating this kind of attack will include limiting the number of concurrent HTTP/HTTPS requests per IP address and may include, where feasible, limiting parameter values associated with keepalive, (i.e., a parameter used to limit the amount of time a connection may be inactive).
Check Content
To view the MaxKeepAliveRequests value, enter the following command: find / -name httpd.conf -print -exec grep -H -i "MaxKeepAliveRequests" {} \; If the returned value of MaxKeepAliveRequests is not set to 100 or greater, this is a finding.
Fix Text
Edit the httpd.conf file and set the MaxKeepAliveRequests directive to 100 or greater.
Additional Identifiers
Rule ID:
Vulnerability ID: V-2240
Group Title:
Expert Comments
CCIs
Number | Definition |
---|---|
No CCIs are assigned to this check |
Controls
Number | Title |
---|---|
No controls are assigned to this check |