setup a timeout to avoid slowloris attacks

krakend · Oct 1, 2024 · d569096 · d569096
1 parent 5653ddd
commit d569096
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 4 deletions.
diff --git a/gin/metrics.go b/gin/metrics.go
@@ -36,8 +36,9 @@ type Metrics struct {
 func (m *Metrics) RunEndpoint(ctx context.Context, e *gin.Engine, l logging.Logger) {
 	logPrefix := "[SERVICE: Stats]"
 	server := &http.Server{
-		Addr:    m.Config.ListenAddr,
-		Handler: e,
+		Addr:              m.Config.ListenAddr,
+		Handler:           e,
+		ReadHeaderTimeout: 3 * time.Second,
 	}
 	go func() {
 		if err := server.ListenAndServe(); err != nil && err != http.ErrServerClosed {

diff --git a/mux/metrics.go b/mux/metrics.go
@@ -35,8 +35,9 @@ type Metrics struct {
 // RunEndpoint runs the *gin.Engine (that should have the stats endpoint) with the logger
 func (m *Metrics) RunEndpoint(ctx context.Context, s *http.ServeMux, l logging.Logger) {
 	server := &http.Server{
-		Addr:    m.Config.ListenAddr,
-		Handler: s,
+		Addr:              m.Config.ListenAddr,
+		Handler:           s,
+		ReadHeaderTimeout: 3 * time.Second,
 	}
 	go func() {
 		l.Error(server.ListenAndServe())