Do you recognize a good idea when you see one? We want to hear from you!
Header Image

I suggest you ...

Web Protection: WebAdmin access to HTTP Connection Timeout Configuration

As some websites require content delivery by backend database servers the connection timeout between a very active server and a slow database can result in a page timeout.

By default the ASG http proxy has a value of 60 seconds before closing the connection. Currently this is only configurable to a higher value with cc, e.g.

# cc http response_timeout 180

to increase the timeout to 180 seconds.

Please make this available also in WebAdmin by placing an option for this in the advanced tab.

199 votes
Vote
Sign in
Check!
(thinking…)
Reset
or sign in with
  • facebook
  • google
    Password icon
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Cameron ByersCameron Byers shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →
    Dennis BoogDennis Boog shared a merged idea: Adjust timeout on webproxy  ·   · 

    Changing this value is not without its downsides, as it prevents the UTM from closing delinquent connections, and could lead to resource overloading on the system.

    As this is possible on the backend through cc, and it is unlikely to be something that needs to be changed frequently, it doesn’t feel like it should be a top priority use of developer resources to add to the UI.

    7 comments

    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      Signed in as (Sign out)
      Submitting...
      • Rich BaldryAdminRich Baldry (Product Owner, Web Protection, Sophos Features & Ideas Laboratory) commented  ·   ·  Flag as inappropriate

        Changing this value is not without its downsides, as it prevents the UTM from closing delinquent connections, and could lead to resource overloading on the system.

        As this is possible on the backend through cc, and it is unlikely to be something that needs to be changed frequently, it doesn't feel like it should be a top priority use of developer resources to add to the UI.

      • Anonymous commented  ·   ·  Flag as inappropriate

        +4 I can't believe this isn't an option. Like, seriously? This makes Sophos seem like a consumer grade product not being able to allow this.

      • Anonymous commented  ·   ·  Flag as inappropriate

        This fixed timeout is not helpful if you invoke long-running reports, SQL queries, or backup scripts.

        It also seems to interfere with something in Windows Live.

      • stuartpattonstuartpatton commented  ·   ·  Flag as inappropriate

        +3 from me. This has been the bane of my life since Squid was silently replaced with the proprietary proxy.

        Also, Squid is tolerant when the amount of data sent by the HTTP server doesn't match what's in the HTTP header (it still displays the content) - the Astaro proxy displays an error (or it used to). I'd like to see this become a option on the proxy configuration.

      Feedback and Knowledge Base