Add default 90s R/W timeout to listeners
Overview
Add default(90s) read/write timeout to undertow socket listeners.
User Stories
No timeout can lead to DOS vulnerability.
Issue Metadata
Related Issues
Affected Projects or Components
undertow ingegration.
Other Interested Projects
Relevant Installation Types
-
Traditional standalone server (unzipped or provisioned by Galleon)
-
Managed domain
-
OpenShift Source-to-Image (S2I)
-
Bootable jar
All projects will have to adjust, as new 90s delay might cause test regression.
Requirements
Set default timeout value for R/W on listener types.
Changed requirements
N/A
Non-Requirements
N/A
Future Work
N/A
Backwards Compatibility
Halfway. Default WILL affect applications and web socket deployments( for which there is another RFE to allow distinct R/W timeouts on those elements ). However config compat should not be affected.
Default Configuration
N/A
Importing Existing Configuration
Not a problem.
Deployments
N/A
Interoperability
N/A
Implementation Plan
N/A
Admin Clients
Not affected as its only default value.
Security Considerations
Improved.
Test Plan
TBD
Community Documentation
As of WFLY X listners( and by extension webscokets) have now default 90s R/W timeout, as to previously no having any( idenfinite)