10.9 Configure connectionTimeout

Information

The connectionTimeout setting allows Tomcat to close idle sockets after a specific amount of time to save system resources.

Rationale:

Closing idle sockets reduces system resource usage which can provide better performance and help protect against Denial of Service attacks.

Impact:

This timeout will also apply when reading any request body when disableUploadTimeout is not set to false.

Solution

Set the connectionTimeout for each connector in $CATALINA_HOME/conf/server.xml ensure to the optimal number of milliseconds based on hardware resources, load, and number of concurrent connections.

connectionTimeout='60000'

Default Value:

By default this is set to 60000 (i.e. 60 seconds).

See Also

https://workbench.cisecurity.org/benchmarks/11652

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, CSCv7|5.1

Plugin: Unix

Control ID: 1da332c1e361dd09f0e28fe7016014bb5678e027833db0aef61542c0ec4ae64f