asp.net mvc - Slow HTTP POST vulnerability on azure -


i have asp.net mvc web application deployed on azure. , have problems slow http post vulnerability. want configure <\limits> turn on connectiontimeout.

i can`t in web.config (or mb don`t know right place write it). in guides thing configure on iis, how in azure?

the setting talking connectiontimeout needs set in applicationhost.config file. file not found part of project, part of azure website. if want view configuration settings in file can go kudo service site can accessed following directions here: https://github.com/projectkudu/kudu/wiki/accessing-the-kudu-service

to location of file go cmd console, click on globe icon , should in the configure folder. how view current settings. change settings need create xdt transform file , drop site root , restart site. can done using ftp (the ftp host url can found in azure portal site).

you going want configure <\weblimits> prevent slow post attack.


Comments