Apache 2.4 timeout not working for idle connections

apache-2.4requesttimeoutweb

I have to lower the Apache Timeout value. I tried to make it 3 or 5. I opened a telnet connection to my Apache and left it with no data, it's always ~30sec + Apache Timeout.

I tested this configuration in Apache 2.2 and it works right (3 sec and the connection is closed automatically).
I tried to make an Apache 2.4 fresh install in a VPS, with no CGI and the less enabled modules I can with no success.

These are the modules I have: authz_core.load authz_user.load headers.load mpm_prefork.conf mpm_prefork.load

But, if you open the connection and send something (like the first line of the request) it runs fine and then Timeout apply successfully

Any Ideas?
Thanks

Best Answer

This was the AcceptFilter configuration (new in 2.4). It defaults to "data" where Linux kernel doesn't tell Apache anything about the connection until there is some data on it.

To "solve" this just add into apache2.conf: AcceptFilter http none

or even AcceptFilter https none

So connections are passed directly to Apache. But there's no need to do this as connections are not being handled by Apache yet.

Related Solutions

Apache Timeout directive not working

You do have the right syntax -- it should be in the global server config or a vhost config.

I tested this with 2.2.11 and Timeout closed a connection from another computer and a connection to localhost after 5 seconds. Have you tried from another machine? My config is certainly different, so you may have another setting that keeps localhost connected(?)

I tested with both nc and telnet and there was no difference either.

Which version of Apache are you using? Are you certain there is nothing coming across the wire (via wireshark or similar)?

Installing mod_security for Apache 2.4

It's likely you still have Apache 2.2 installed and when you configured ModSecurity it built it for 2.2.

Here's the steps I use to install ModSecurity from source based on Apache installed in /usr/local/apache2:

#Download ModSecurity
wget https://www.modsecurity.org/tarball/2.9.1/modsecurity-2.9.1.tar.gz
wget https://www.modsecurity.org/tarball/2.9.1/modsecurity-2.9.1.tar.gz.sha256

#Config checksum of download
sha256sum -c modsecurity-2.9.1.tar.gz.sha256

#Install ModSecurity:
tar -xvf modsecurity-2.9.1.tar.gz
cd modsecurity-2.9.1
./configure --with-apxs=/usr/local/apache2/bin/apxs
make
sudo make install
cp /usr/local/modsecurity/lib/mod_security2.so /usr/local/apache2/modules

Then configure it in Apache config.

Hope that helps.

Best Answer

Related Solutions

Apache Timeout directive not working

Installing mod_security for Apache 2.4

Related Topic