STIGhubSTIGhub
STIGsSearchCompareAbout

STIGhub

A free tool to search and browse the entire DISA STIG library. Saves up to 75% in security compliance research time.

Navigation

  • Browse STIGs
  • Search
  • Compare Versions

Resources

  • About
  • VPAT
  • DISA STIG Library
Powered by Pylon
© 2026 Beacon Cloud Solutions, Inc. All rights reserved.
← Back to APACHE 2.2 Site for UNIX Security Technical Implementation Guide

V-2240

CAT II (Medium)

The number of allowed simultaneous requests must be set.

Rule ID

SV-33018r1_rule

STIG

APACHE 2.2 Site for UNIX Security Technical Implementation Guide

Version

V1R11

CCIs

None

Discussion

Resource exhaustion can occur when an unlimited number of concurrent requests are allowed on a web site, facilitating a denial of service attack. Mitigating this kind of attack will include limiting the number of concurrent HTTP/HTTPS requests per IP address and may include, where feasible, limiting parameter values associated with keepalive, (i.e., a parameter used to limit the amount of time a connection may be inactive).

Check Content

To view the MaxKeepAliveRequests value, enter the following command: 

grep "MaxKeepAliveRequests" /usr/local/apache2/conf/httpd.conf 

If the returned value of MaxKeepAliveRequests is not set to 100 or greater, this is a finding.

Fix Text

Edit the httpd.conf file and set the MaxKeepAliveRequests directive to 100 or greater.