Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
AS2021
Contributor
Jump to solution

AppSec WAF cannot set proxy_read_timeout

Hi everyone,

 

One of our client facing issue that not able to set proxy_read_timeout.

They would like to set these custom values:

proxy_read_timeout 300;

proxy_connect_timeout 300;

proxy_send_timeout 300;

Deploy will fail until remove one or both of the “Connect Timeout” parameters.

They got this in configuration:

The proxy_read_timeout parameter is not passed into it.


Anyone can help ?

 

Thanks

 

0 Kudos
1 Solution

Accepted Solutions
yuvalmamka
Employee
Employee

Ok, you can add these configuration in another way:

  1. Create a .txt file with these lines in it:

    proxy_read_timeout 300;
    proxy_connect_timeout 300;
    proxy_send_timeout 300;

  2. Mark V near the additional server block instructions and upload the .txt file.
  3. Click Ok and Enforce the policy.

View solution in original post

0 Kudos
6 Replies
yuvalmamka
Employee
Employee

Hi,

What is the type of deployment? How did you add these configurations?
What error do you get while deploying? And what it takes to resolve it from your tries?

0 Kudos
AS2021
Contributor

Hi 

Deployment is done via gui

AS2021_0-1693296737396.png

The Gui immediately changes it to:

AS2021_1-1693296781310.png

The result will be this:

AS2021_2-1693296802681.png

Deploy will fail until I remove one or both of the “Connect Timeout” parameters.

0 Kudos
yuvalmamka
Employee
Employee

So, basically, the UI is adding another "Connect Timeout" config line?
And then you need to remove it in order for the deployment to succeed?

After you do that, everything is working as expected?

0 Kudos
AS2021
Contributor

No changes occur when removing the timeout despite wanting to change it to 300.

0 Kudos
yuvalmamka
Employee
Employee

Ok, you can add these configuration in another way:

  1. Create a .txt file with these lines in it:

    proxy_read_timeout 300;
    proxy_connect_timeout 300;
    proxy_send_timeout 300;

  2. Mark V near the additional server block instructions and upload the .txt file.
  3. Click Ok and Enforce the policy.
0 Kudos
AS2021
Contributor

Hi yuvalmamka,

Solution worked for our client, thank you for your suggestion. Just a note that we had to first reset all parameters back to their original settings before we could upload the new ones, but then it worked.