解决绿盟漏洞扫描 gateway、nacos、springboot tomcat检测到目标主机可能存在缓慢的HTTP拒绝服务攻击问题
具体参数大小根据自己系统评估。
1、gateway
gateway采用的是netty容器，添加如下配置。
server:
netty:
connection-timeout: 5000
spring:
cloud:
gateway:
httpclient:
connect-timeout: 5000
pool:
# 最大连接数
max-connections: 200
# 获取连接的超时时间
acquire-timeout: 5000
type: fixed2、nacos
server.tomcat.connection-timeout=5000
server.tomcat.max-connections=200
server.tomcat.max-threads=1003、springboot tomcat
server:
tomcat:
threads:
max: 200
min-spare: 30
max-swallow-size: -1
acceptCount: 100
connection-timeout: 5000
max-connections: 500