question about undertow max-post-size

[hchenkwi]

Hi,

We are using Wildfly 10.0.0.Final on Solaris 10 with java 8.

we need to upload large file size, it seems that setting "max-post-size" helps solving the problem.  the book "Wildfly Configuration, Deployment, and Administration" says setting max-post-size=0 can set the maximum allowed incoming post request size to be unlimited.

Is there any side effect by setting max-post-size to be big number or unlimited?

<subsystem xmlns="urn:jboss:domain:undertow:3.0"> 

            <buffer-cache name="default"/> 

           <server name="default-server"> 

                <http-listener name="default" max-post-size="25485760" redirect-socket="https" socket-binding="http"/>

Thanks, Helen

[abhijithumbe]

The downside to disabling the POST size limitation is that you are potentially opening up the server to a DOS attack.  With this limitation removed, an attacker could potentially upload a large POST request that could use up all of the available memory. The recommendation is to leave this limitation in place but adjust it according to the normal/expected usage of your web application

[hchenkwi]

Hi Abhijit,

Thanks a lot for the response.

Helen