diff --git a/doc/htdocs/configure.html b/doc/htdocs/configure.html index a6430179..b36d15cd 100644 --- a/doc/htdocs/configure.html +++ b/doc/htdocs/configure.html @@ -235,6 +235,48 @@ is not tied to the length of time required to handle a single request.

Generally set in the 1-5 seconds range.

+
+

Security

+
+

limit_request_line

+ +

The maximum size of HTTP request line in bytes.

+

This parameter is used to limit the allowed size of a client's +HTTP request-line. Since the request-line consists of the HTTP +method, URI, and protocol version, this directive places a +restriction on the length of a request-URI allowed for a request +on the server. A server needs this value to be large enough to +hold any of its resource names, including any information that +might be passed in the query part of a GET request. By default +this value is 4094 and can't be larger than 8190.

+

This parameter can be used to prevent any DDOS attack.

+
+
+

limit_request_fields

+ +

Limit the number of HTTP headers fields in a request.

+

Value is a number from 0 (unlimited) to 32768. This parameter is +used to limit the number of headers in a request to prevent DDOS +attack. Used with the limit_request_field_size it allows more +safety.

+
+
+

limit_request_field_size

+ +

Limit he allowed size of an HTTP request header field.

+

Value is a number from 0 (unlimited) to 8190. to set the limit +on the allowed size of an HTTP request header field.

+
+

Debugging

@@ -256,6 +298,14 @@ handling that's sent to clients.

Install a trace function that spews every line executed by the server.

This is the nuclear option.

+
+

check_config

+ +

Check the configuration..

+

Server Mechanics

@@ -375,12 +425,14 @@ address of the client connection to gunicorn via a proxy.

access_log_format

The Access log format .

By default:

%(h)s %(l)s %(u)s %(t)s "%(r)s" %(s)s %(b)s "%(f)s" "%(a)s"

h: remote address +l: '-' +u: currently '-', may be user name in future releases t: date of the request r: status line (ex: GET / HTTP/1.1) s: status @@ -388,9 +440,10 @@ b: response length or '-' f: referer a: user agent T: request time in seconds -D: request time in microseconds

-

You can also pass any WSGI request header as a parameter. -(ex '%(HTTP_HOST)s').

+D: request time in microseconds, +p: process ID +{Header}i: request header +{Header}o: response header

errorlog

@@ -431,6 +484,16 @@ python path to a subclass like gunicorn.glogging.Logger. Alternatively the syntax can also load the Logger class with egg:gunicorn#simple

+
+

logconfig

+ +

The log config file to use. +Gunicorn uses the standard Python logging module's Configuration +file format.

+

Process Naming

@@ -455,6 +518,29 @@ module.

Internal setting that is adjusted for each type of application.

+
+

Django

+
+

django_settings

+ +

The Python path to a Django settings module.

+

e.g. 'myproject.settings.main'. If this isn't provided, the +DJANGO_SETTINGS_MODULE environment variable will be used.

+
+
+

pythonpath

+ +

A directory to add to the Python path for Django.

+

e.g. +'/home/djangoprojects/myproject'.

+
+

Server Hooks

@@ -486,7 +572,7 @@ def on_reload(server):

when_ready

-
  • Debugging