NODE-5851 Add additional APIFW parameters

Add additional APIFW parameters
wallarm · Oct 24, 2024 · ac7383c · ac7383c
2 parents a53498d + 8f12be2
commit ac7383c
Show file tree

Hide file tree

Showing 2 changed files with 33 additions and 0 deletions.
diff --git a/charts/ingress-nginx/templates/_helpers.tpl b/charts/ingress-nginx/templates/_helpers.tpl
@@ -363,6 +363,18 @@ Create the name of the controller service account to use
       value: 5s
     - name: APIFW_WRITE_TIMEOUT
       value: 5s
+    - name: APIFW_READ_BUFFER_SIZE
+      value: "{{ .Values.controller.wallarm.apiFirewall.readBufferSize }}"
+    - name: APIFW_WRITE_BUFFER_SIZE
+      value: "{{ .Values.controller.wallarm.apiFirewall.writeBufferSize }}"
+    - name: APIFW_MAX_REQUEST_BODY_SIZE
+      value: "{{ .Values.controller.wallarm.apiFirewall.maxRequestBodySize }}"
+    - name: APIFW_DISABLE_KEEPALIVE
+      value: "{{ .Values.controller.wallarm.apiFirewall.disableKeepalive }}"
+    - name: APIFW_MAX_CONNS_PER_IP
+      value: "{{ .Values.controller.wallarm.apiFirewall.maxConnectionsPerIp }}"
+    - name: APIFW_MAX_REQUESTS_PER_CONN
+      value: "{{ .Values.controller.wallarm.apiFirewall.maxRequestsPerConnection }}"
     - name: APIFW_API_MODE_DEBUG_PATH_DB
       value: "{{ include "wallarm-apifw.path" . }}/2/wallarm_api.db"
 {{- if .Values.controller.wallarm.apiFirewall.extraEnvs }}

diff --git a/charts/ingress-nginx/values.yaml b/charts/ingress-nginx/values.yaml
@@ -1074,6 +1074,27 @@ controller:
       ### Enable or disable API Firewall functionality (true|false)
       ###
       enabled: true
+      ### Per-connection buffer size (in bytes) for requests' reading. This also limits the maximum header size.
+      ### Increase this buffer if your clients send multi-KB RequestURIs and/or multi-KB headers (for example, BIG cookies)
+      ###
+      readBufferSize: 8192
+      ### Per-connection buffer size (in bytes) for responses' writing.
+      ###
+      writeBufferSize: 8192
+      ### Maximum request body size (in bytes). The server rejects requests with bodies exceeding this limit.
+      ###
+      maxRequestBodySize: 4194304
+      ### Whether to disable keep-alive connections. The server will close all the incoming connections after sending
+      ## the first response to client if this option is set to 'true'
+      ###
+      disableKeepalive: false
+      ### Maximum number of concurrent client connections allowed per IP. '0' means unlimited
+      ###
+      maxConnectionsPerIp: 0
+      ### Maximum number of requests served per connection. The server closes connection after the last request.
+      ### 'Connection: close' header is added to the last response. '0' means unlimited
+      ###
+      maxRequestsPerConnection: 0
       config:
         mainPort: 18081
         healthPort: 18082