Chapter 17. Security

system.dosfilter.enable

Set to Y (default) or N, to enable the Denial of Service Filter (DoSFilter).

DoSFilter statistics are shown in the Admin Web App. See Section 4.3.7, “Filtered Requests”.

system.dosfilter.delay-msec

Delay (in milliseconds) that is applied to all requests over the rate limit system.dosfilter.max-requests-per-sec, before they are considered at all. -1 means just reject request, 0 means no delay (throttled), otherwise it is the delay. Default: 100.

system.dosfilter.max-idle-tracker-msec

Maximum amount of time (in milliseconds) to keep track of request rates for a connection, before deciding that the user has gone away, and discarding it. Default: 30000.

system.dosfilter.max-request-msec

Maximum amount of time (in milliseconds) to allow the request to process. Default: 30000.

system.dosfilter.max-requests-per-sec

Maximum number of requests from a connection per second. Requests in excess of this are first delayed, then throttled. Default: 75.

system.dosfilter.throttle-msec

Amount of time (in milliseconds) to async wait for semaphore. Default: 30000.

system.dosfilter.throttled-requests

Number of requests over the rate limit able to be considered at once. Default: 5.

system.dosfilter.too-many-code

HTTP status code to send if there are too many requests. Default: 429 (too many requests). 503 (service unavailable) is another option.

system.dosfilter.whitelist

Comma-separated list of host names or IP addresses, either in the form of a dotted decimal notation A.B.C.D or in the CIDR notation A.B.C.D/M, that will not be rate limited in DoSFilter. Note: localhost and 127.0.0.1 are implicitly whitelisted.

system.dosfilter.warn-interval.applog.mins

Interval (minutes) within which DoSFilter events are totaled and written as warning in the Application Log. The expiration of the interval is triggered by a DoSFilter event. Default: 5.

system.dosfilter.warn-interval.webapp.secs

Interval (seconds) within which DoSFilter events are totaled and send as Real-time Activity warning with popup message to the Admin Web App. Default: 60.