10.9 Configure connectionTimeout

Information

The connectionTimeout setting allows Tomcat to close idle sockets after a specific amount of time to save system resources.

Rationale:

Closing idle sockets reduces system resource usage which can provide better performance and help protect against Denial of Service attacks.

Impact:

This timeout will also apply when reading any request body when disableUploadTimeout is not set to false.

Solution

Set the connectionTimeout for each connector in $CATALINA_HOME/conf/server.xml ensure to the optimal number of milliseconds based on hardware resources, load, and number of concurrent connections.

connectionTimeout='60000'

Default Value:

By default this is set to 60000 (i.e. 60 seconds).

See Also

https://workbench.cisecurity.org/files/4107

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, CSCv7|5.1

Plugin: Unix

Control ID: 3c77b3763736152a5dde983bc2327d795668edff7813b2ea98566dabbfefc5fc