# # BEGIN: defaults-waf.cnf # defaults mode http option http-server-close option dontlognull option redispatch # Since ulimit -n (-H) is patched in container # HAProxy is supposed to adjust this value accordingly # maxconn 2000 option tcpka # For the backends option h1-case-adjust-bogus-client timeout connect 5s # non-waf has 120s # Slowloris protection timeout http-request 15s # By setting timeout http-request these values are shadowed? # timeout client 120s # timeout client-fin 120s # timeout server 120s # timeout tunnel 2h timeout queue 30s timeout tarpit 1m # tarpit hold time backlog 8192 # Less or equal power of 2 is used # # END: defaults-waf.cnf #