cockroachdb / cockroachdb/cockroach
Add HTTP Server Timeouts in DB Console
Open
C-cleanup
T-db-server
- Dominant language
- Go
- Stars
- 32.5k
- Forks
- 4.1k
- PR merge metrics
- PR metrics pending
Description
`http.Server` configuration in `pkg/util/netutil/net.go#L76` lacks timeout settings:
- `ReadTimeout`
- `WriteTimeout`
- `IdleTimeout`
- `ReadHeaderTimeout`
Defense-in-depth hardening, not critical fix.
https://en.wikipedia.org/wiki/Slowloris_(computer_security)
Jira issue: CRDB-63607
Contributor guide
Assessment
This issue has not been assessed yet.