diff --git a/charts/ingress-nginx/templates/_helpers.tpl b/charts/ingress-nginx/templates/_helpers.tpl index 35f0dc55d..31901cad3 100644 --- a/charts/ingress-nginx/templates/_helpers.tpl +++ b/charts/ingress-nginx/templates/_helpers.tpl @@ -363,6 +363,18 @@ Create the name of the controller service account to use value: 5s - name: APIFW_WRITE_TIMEOUT value: 5s + - name: APIFW_READ_BUFFER_SIZE + value: "{{ .Values.controller.wallarm.apiFirewall.readBufferSize }}" + - name: APIFW_WRITE_BUFFER_SIZE + value: "{{ .Values.controller.wallarm.apiFirewall.writeBufferSize }}" + - name: APIFW_MAX_REQUEST_BODY_SIZE + value: "{{ .Values.controller.wallarm.apiFirewall.maxRequestBodySize }}" + - name: APIFW_DISABLE_KEEPALIVE + value: "{{ .Values.controller.wallarm.apiFirewall.disableKeepalive }}" + - name: APIFW_MAX_CONNS_PER_IP + value: "{{ .Values.controller.wallarm.apiFirewall.maxConnectionsPerIp }}" + - name: APIFW_MAX_REQUESTS_PER_CONN + value: "{{ .Values.controller.wallarm.apiFirewall.maxRequestsPerConnection }}" - name: APIFW_API_MODE_DEBUG_PATH_DB value: "{{ include "wallarm-apifw.path" . }}/2/wallarm_api.db" {{- if .Values.controller.wallarm.apiFirewall.extraEnvs }} diff --git a/charts/ingress-nginx/values.yaml b/charts/ingress-nginx/values.yaml index 24793c942..193a58895 100644 --- a/charts/ingress-nginx/values.yaml +++ b/charts/ingress-nginx/values.yaml @@ -1074,6 +1074,27 @@ controller: ### Enable or disable API Firewall functionality (true|false) ### enabled: true + ### Per-connection buffer size (in bytes) for requests' reading. This also limits the maximum header size. + ### Increase this buffer if your clients send multi-KB RequestURIs and/or multi-KB headers (for example, BIG cookies) + ### + readBufferSize: 8192 + ### Per-connection buffer size (in bytes) for responses' writing. + ### + writeBufferSize: 8192 + ### Maximum request body size (in bytes). The server rejects requests with bodies exceeding this limit. + ### + maxRequestBodySize: 4194304 + ### Whether to disable keep-alive connections. The server will close all the incoming connections after sending + ## the first response to client if this option is set to 'true' + ### + disableKeepalive: false + ### Maximum number of concurrent client connections allowed per IP. '0' means unlimited + ### + maxConnectionsPerIp: 0 + ### Maximum number of requests served per connection. The server closes connection after the last request. + ### 'Connection: close' header is added to the last response. '0' means unlimited + ### + maxRequestsPerConnection: 0 config: mainPort: 18081 healthPort: 18082