[ https://issues.apache.org/jira/browse/HBASE-28138?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17774876#comment-17774876 ]
Wellington Chevreuil commented on HBASE-28138: ---------------------------------------------- Cherry picked into branch-3 and branch-2. Any other branches you would want this into, [~zhangduo]? > Make the connection idle timeout configurable for the embedded HTTP servers > --------------------------------------------------------------------------- > > Key: HBASE-28138 > URL: https://issues.apache.org/jira/browse/HBASE-28138 > Project: HBase > Issue Type: Improvement > Affects Versions: 3.0.0-alpha-4 > Reporter: qiuwei > Assignee: qiuwei > Priority: Minor > Fix For: 2.6.0, 3.0.0-beta-1, 4.0.0-alpha-1 > > Attachments: > 0001-HBASE-28138-Slow-HTTP-Denial-of-Service-Attack-of-HB.patch > > > The Jetty Server may be slow HTTP denial of service attacks in hbase master > web ui due to the default value of jetty connector idle timeout is 30000. > This may cause such an attack. -- This message was sent by Atlassian Jira (v8.20.10#820010)