Adobe 38043740 Lockdown Guide - Page 62

Maximum size of, post data, Request Throttle, Threshold, Memory, of concurrent file uploads to take

Page 62 highlights

Setting Maximum size of post data Default 100MB Request Throttle Threshold 4MB Request Throttle Memory 200MB Recommendation Description As low as possible If your application does not deal with large HTTP POST operations (such as file uploads, or large web service requests), reduce this size to 1MB. If the application does allow uploads of files set this to the maximum size you want to allow. You should also be able to specify a HTTP Request size limit on your web server. 1MB 100MB on 32 bit installations. ColdFusion will throttle any request larger than this value. If your application requires a large number of concurrent file uploads to take place, you may need to increase this setting. On a 32 bit installation the default value would be close to 20% of the heap. 64 bit servers allow for much larger heap sizes. Aim for 10% of the maximum heap size as an upper limit for this setting. 62

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87

62
Setting
Default
Recommendation
Description
Maximum size of
post data
100MB
As low as possible
If your application does not deal with
large HTTP POST operations (such
as file uploads, or large web service
requests), reduce this size to 1MB.
If the application does allow uploads
of files set this to the maximum size
you want to allow.
You should also be able to specify a
HTTP Request size limit on your
web server.
Request Throttle
Threshold
4MB
1MB
ColdFusion will throttle any request
larger than this value. If your
application requires a large number
of concurrent file uploads to take
place, you may need to increase this
setting.
Request Throttle
Memory
200MB
100MB on 32 bit
installations.
On a 32 bit installation the default
value would be close to 20% of the
heap. 64 bit servers allow for much
larger heap sizes. Aim for 10% of
the maximum heap size as an upper
limit for this setting.