----- Oryginalna wiadomość ----- > Od: "Roberto De Ioris" <[email protected]> > Do: "uWSGI developers and users list" <[email protected]> > Wysłane: czwartek, 3 maj 2012 14:50:44 > Temat: Re: [uWSGI] harakiri pass the selected URL > > If you enable post-buffering you will trigger a specific harakiri > behaviour on http request with a body: > > whenever a chunk is received, the harakiri is reset. Obviously this > is a security flaw (as disabling harakiri) a bad-guy can abuse with > something like slowloris. > > I suggest you to mitigate the problem limiting the post body > (--limit-post) > > If you have a buffering server (like nginx) before uWSGI, that > problem does not exist (or better: it is highly mitigated) >
The problem is not in a "post-buffering". I'm using Nginx with upload module (http://www.grid.net.ru/nginx/upload.en.html). The problem is that after receiving/writing the file (eg images) performs long calculations (eg generate thumbnails). I see two options: 1. Change the approach to generate thumbnails for asynchronous or use spooler / mule or something similar. 2. Turn off harakiri during the calculations. I do not really want to do first, a lot of changes would have been. The application requires the continuity of the transaction. Maybe there is something to do with 2., for example: uwsgi.turn_off_harakiri_for_this_request() ? -- Łukasz Wróblewski http://www.nri.pl/ - Nowoczesne Rozwiązania Internetowe http://www.hostowisko.pl/ - Profesjonalny i tani hosting http://www.katalog-polskich-firm.pl/ - Najlepszy darmowy katalog firm _______________________________________________ uWSGI mailing list [email protected] http://lists.unbit.it/cgi-bin/mailman/listinfo/uwsgi
