The mod\_reqtimeout module is used in Apache HTTP server to set timeouts per request. It helps to mitigate denial-of-service (DoS) attacks and server resource abuse.
Configuring this module can be achieved by modifying your Apache configuration file, typically located at `/etc/httpd/conf/httpd.conf` or `/etc/apache2/httpd.conf` depending on your Linux distribution.
Follow the steps below to configure the mod\_reqtimeout module:
1. First, ensure that this module is enabled. Depending on your Apache version, you either simply ensure that the module is not commented out in the Apache configuration file, or use one of the following statements:
- For Apache 2.2: `LoadModule reqtimeout_module modules/mod_reqtimeout.so`
- For Apache 2.4 and later: `LoadModule reqtimeout_module modules/mod_reqtimeout.so`
1. The default configuration is often sufficient for most use cases. However, you can tweak parameters based on your needs. Add following lines to the configuration file:
```
```
In the above example:
- `header=20-40`: The server will you wait for 20 seconds for the data to arrive from client, but it will not wait more than 40 seconds.
- `MinRate=500` : The clients should send data at minimum rate of 500 bytes/second.
- `body=20` : Once request body starts, the client should finish sending the request within 20 seconds.
1. After you’ve modified this file, you must restart Apache so the changes can take effect. This can be done by using one of the following commands:
- For Systems using System V init: `/etc/init.d/httpd restart`
- For Systems using systemd: `systemctl restart httpd.service`
Please note: Be careful when adjusting these settings, as making them too restrictive can cause issues for users with slow connections or when dealing with large file uploads.
More details on how to configure this module can be found in the official Apache documentation:
https://httpd.apache.org/docs/2.4/mod/mod\_reqtimeout.html
