From 86add116627980d099ac9a80c14970a754f10c85 Mon Sep 17 00:00:00 2001 From: Andrew Geissler Date: Tue, 15 May 2018 07:08:55 -0700 Subject: Increase nginx timeouts from 10s to 30s Testing in certain network environments has show the 10s timeout is too small. It's unclear if the issue is with the client or server side. When it hits, it occurs during the upload of BMC and PNOR images. The error on the client side is a errno 104 (Connection reset by peer). The error on the server side is a 408 which in nginx indicates a timeout for the client_body_timeout setting or the client_header_timeout setting. It's doubtful the client_header could be the issue here so only the client_body_timeout was focused on. The send_timeout value can also result in a dropped client connection. The default for both the client_body_timeout and the send_timeout is 60s. In openbmc these were changed to 10s to match with OWASP guidelines. This commit bumps them up to 30s to address this issue. Change-Id: I7e360ed03fc533e5ca77f829859a82737fe9d5bf Signed-off-by: Andrew Geissler --- .../meta-openpower/meta-ibm/recipes-httpd/nginx/files/nginx.conf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'meta-openbmc-machines') diff --git a/meta-openbmc-machines/meta-openpower/meta-ibm/recipes-httpd/nginx/files/nginx.conf b/meta-openbmc-machines/meta-openpower/meta-ibm/recipes-httpd/nginx/files/nginx.conf index c94554435..8cf8c0d96 100644 --- a/meta-openbmc-machines/meta-openpower/meta-ibm/recipes-httpd/nginx/files/nginx.conf +++ b/meta-openbmc-machines/meta-openpower/meta-ibm/recipes-httpd/nginx/files/nginx.conf @@ -29,10 +29,10 @@ http { # Comment out to enable access log in /var/log/nginx/ access_log off; - client_body_timeout 10; + client_body_timeout 30; client_header_timeout 10; keepalive_timeout 5 5; - send_timeout 10; + send_timeout 30; # Do not return nginx version to clients server_tokens off; -- cgit v1.2.3