Merge pull request #82 from krakend/avoid_slowloris

setup a timeout to avoid slowloris attacks
krakend · Oct 1, 2024 · 8d6fbb8 · 8d6fbb8
2 parents 9565b94 + bc83810
commit 8d6fbb8
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/exporter/prometheus/prometheus.go b/exporter/prometheus/prometheus.go
@@ -42,8 +42,9 @@ func Exporter(ctx context.Context, cfg opencensus.Config) (*prometheus.Exporter,
 	router := http.NewServeMux()
 	router.Handle("/metrics", exporter)
 	server := http.Server{
-		Handler: router,
-		Addr:    fmt.Sprintf(":%d", cfg.Exporters.Prometheus.Port),
+		Handler:           router,
+		Addr:              fmt.Sprintf(":%d", cfg.Exporters.Prometheus.Port),
+		ReadHeaderTimeout: 3 * time.Second,
 	}
 
 	go func() {