9.2 Ensure KeepAlive Is Enabled

Information

The 'KeepAlive' directive controls whether Apache will reuse the same TCP connection per client to process subsequent HTTP requests from that client. It is recommended that the 'KeepAlive' directive be set to 'On'.

Rationale:

Allowing per-client reuse of TCP sockets reduces the amount of system and network resources required to serve requests. This efficiency gain may improve a server's resiliency to DoS attacks.

Solution

Perform the following to implement the recommended state:

Add or modify the 'KeepAlive' directive in the Apache configuration to have a value of 'On'.

KeepAlive On

See Also

https://workbench.cisecurity.org/files/2378

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-12, CSCv6|9

Plugin: Unix

Control ID: ee3d6ef5b1619c1593421ff400e5369f0dc29724755465a0a190b099c72e9947