Question

How do I configure a Node.js-based server to detect and mitigate a Slowloris attack effectively?

How can I configure a Node.js-based server to detect and mitigate a Slowloris attack effectively? I’ve heard that Slowloris can keep connections open and exhaust server resources. What strategies or tools can I use in Node.js to prevent this type of attack, and how can I configure the server to handle such threats?

Answer 1

Set the time limits for how long a connection can be in an idle state or open. The connection will be closed if it doesn't send data within the given time.

const http = require('http');

const server = http.createServer((req, res) => {

  res.end('Hi , there !');

});

// Set the timeout for inactive sockets in milliseconds

server.timeout = 4000; // 4 seconds

server.listen(5000, () => {

  console.log('Server is listening on port 5000');

});