Home / server / Questions / 468886
Accepted
Michael Böckling
Asked: 2013-01-15 06:21:57 +0800 CST

From which Apache version onward is LimitRequestFieldSize no longer hardcoded to 8k max?

  • 772

Title says it all: from which version onward is the LimitRequestFieldSize no longer hardcoded to a max. of 8k?

It seems 2.2.15 is still affected.

apache-2.2

1 Answers

  1. Best Answer

    Ok, so it turns out that it works in 2.2, but you need to increase the max AJP packet size if you have a Tomcat behind it and use mod_proxy_ajp, or else it will still give a 400 Bad Request.

    Specifically, set this in Apache:

    LimitRequestFieldSize 65536
ProxyIOBufferSize 65536

    and this in Tomcat server.xml on the ajp connector:

    packetSize="65536"

    Only setting LimitRequestFieldSize won't do the trick!

    • 5