The Apache web server must be tuned to handle the operational requirements of the hosted application.
An XCCDF Rule
Description
A denial of service (DoS) can occur when the Apache web server is so overwhelmed that it can no longer respond to additional requests. A web server not properly tuned may become overwhelmed and cause a DoS condition even with expected traffic from users. To avoid a DoS, the Apache web server must be tuned to handle the expected traffic for the hosted applications.
- ID
- SV-214354r961620_rule
- Version
- AS24-W1-000830
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Add or modify the "Timeout" directive in the Apache configuration to have a value of "10" seconds or less.
"Timeout 10"
Restart the Apache service.