/etc/apache2/mods-available/reqtimeout.conf - Debian GNU/Linux 9 (stretch)

This is the default example configuration of reqtimeout.conf provided by Apache. This config file was generated by Apache running on Debian 9.

It is located under: /etc/apache2/mods-available/reqtimeout.conf

    <IfModule reqtimeout_module>

	# mod_reqtimeout limits the time waiting on the client to prevent an
	# attacker from causing a denial of service by opening many connections
	# but not sending requests. This file tries to give a sensible default
	# configuration, but it may be necessary to tune the timeout values to
	# the actual situation. Note that it is also possible to configure
	# mod_reqtimeout per virtual host.

	# Wait max 20 seconds for the first byte of the request line+headers
	# From then, require a minimum data rate of 500 bytes/s, but don't
	# wait longer than 40 seconds in total.
	# Note: Lower timeouts may make sense on non-ssl virtual hosts but can
	# cause problem with ssl enabled virtual hosts: This timeout includes
	# the time a browser may need to fetch the CRL for the certificate. If
	# the CRL server is not reachable, it may take more than 10 seconds
	# until the browser gives up.
	RequestReadTimeout header=20-40,minrate=500

	# Wait max 10 seconds for the first byte of the request body (if any)
	# From then, require a minimum data rate of 500 bytes/s
	RequestReadTimeout body=10,minrate=500


# vim: syntax=apache ts=4 sw=4 sts=4 sr noet


Config Details

Operating system
Debian GNU/Linux 9 (stretch)
27 lines
MD5 checksum


Download the raw file with wget or curl


wget -O reqtimeout.conf.example http://exampleconfig.com/static/raw/apache/debian9/etc/apache2/mods-available/reqtimeout.conf


curl http://exampleconfig.com/static/raw/apache/debian9/etc/apache2/mods-available/reqtimeout.conf > reqtimeout.conf.example