clawbot 3d7733bfaf The header size and the idle time as settings (closes #70) ...

SWWAF_CLIENT_REQUEST_HEADER_MAX_BYTES (default 32K) and
SWWAF_CLIENT_IDLE_TIMEOUT (default 120s) replace the two values the
proxy fixed. The idle time is read like the other durations, and can
be off.

Go's server reads 4K past the header limit it is given before it
refuses, so it is still given the setting less 4K. The header size
must be more than 4K and cannot be off; any other value stops the
start with a message that does not offer off.

SPEC.md and README.md say so. README.md lists both settings, no longer
calls them fixed, and names them as built.

Model: opus-5-5

2026-10-06 02:34:56 +00:00

..

config

The header size and the idle time as settings (closes #70)

2026-10-06 02:34:56 +00:00

lookup

Country allow and deny lists, looked up through GeoJS (closes #44)

2026-10-04 08:29:41 +02:00

proxy

The header size and the idle time as settings (closes #70)

2026-10-06 02:34:56 +00:00

ratelimit

Per-client request rate limits over a minute, an hour and a day (closes #43)

2026-10-04 04:24:34 +02:00

requestlog

Network lists: always allowed, exempt from rate limits, always refused (closes #19)

2026-10-06 02:36:27 +02:00

smallwebwaf

The header size and the idle time as settings (closes #70)

2026-10-06 02:34:56 +00:00