Adobe 38043740 Lockdown Guide - Page 64

Timeout Request Queue

Page 64 highlights

Setting Maximum number of simultaneous CFC function requests Default 15 Recommendation Description 1 if not using Remote CFC function requests, otherwise tuned. This setting applies only to CFC functions that have access=remote specified, as they are invoked using /example.cfc?method=MethodName. This applies to methods invoked via the ColdFusion AJAX proxy as well. If your applications do not make use of this feature set to 1. Otherwise use load testing to find the optimal value for this setting. Maximum number 1 of simultaneous Report threads Maximum number 10 of threads available for CFTHREAD Timeout requests waiting in queue after 60 seconds 1 Keep this value at 1 unless you are using cfreport heavily. 1 if not using cfthread, tuned otherwise. Set this value to 1 if you are not using cfthread. If you do use cfthread setting a value too high can lead to context switching. 5 seconds (Match Request Timeout) This setting can generally be set equivalent to the Timeout Requests After value specified in the Settings section. A lower setting here can mitigate the effectiveness of DOS attacks. Request Queue Timeout Page Blank or /CFIDE/administra tor/templates/requ est_timeout_error. cfm Specified Specify a HTML file giving the user a message to wait and retry their request again. The message should not disclose the fact that the queue timed out. 64

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87

64
Setting
Default
Recommendation
Description
Maximum number
of simultaneous
CFC function
requests
15
1 if not using
Remote CFC
function requests,
otherwise tuned.
This setting applies only to CFC
functions that have access=remote
specified, as they are invoked using
/example.cfc?method=MethodName.
This applies to methods invoked via
the ColdFusion AJAX proxy as well.
If your applications do not make use
of this feature set to 1. Otherwise
use load testing to find the optimal
value for this setting.
Maximum number
of simultaneous
Report threads
1
1
Keep this value at 1 unless you are
using cfreport heavily.
Maximum number
of threads available
for CFTHREAD
10
1 if not using
cfthread, tuned
otherwise.
Set this value to 1 if you are not
using cfthread. If you do use
cfthread setting a value too high can
lead to context switching.
Timeout requests
waiting in queue
after
60 seconds
5 seconds (Match
Request Timeout)
This setting can generally be set
equivalent to the
Timeout Requests
After
value specified in the Settings
section. A lower setting here can
mitigate the effectiveness of DOS
attacks.
Request Queue
Timeout Page
Blank or
/CFIDE/administra
tor/templates/requ
est_timeout_error.
cfm
Specified
Specify a HTML file giving the user a
message to wait and retry their
request again. The message should
not disclose the fact that the queue
timed out.