Free DISA STIG and SRG Library | Vaulted

V-2240

The number of allowed simultaneous requests must be set.

Finding ID
WG110 A22
Rule ID
SV-33018r1_rule
Severity
Cat II
CCE
(None)
Group Title
WG110
CCI
(None)
Target Key
(None)
Documentable
No
Discussion

Resource exhaustion can occur when an unlimited number of concurrent requests are allowed on a web site, facilitating a denial of service attack. Mitigating this kind of attack will include limiting the number of concurrent HTTP/HTTPS requests per IP address and may include, where feasible, limiting parameter values associated with keepalive, (i.e., a parameter used to limit the amount of time a connection may be inactive).

Fix Text

Edit the httpd.conf file and set the MaxKeepAliveRequests directive to 100 or greater.

Check Content

To view the MaxKeepAliveRequests value, enter the following command: grep "MaxKeepAliveRequests" /usr/local/apache2/conf/httpd.conf If the returned value of MaxKeepAliveRequests is not set to 100 or greater, this is a finding.

Responsibility

Web Administrator