E1: JAS: How to Prevent Denial of Service Attacks in EnterpriseOne (Doc ID 2979912.1)

Last updated on OCTOBER 16, 2023

Applies to:

Goal

Information in this document applies to JD Edwards E1 Applications deployed on Weblogic Server, Websphere Application Server, IBM HTTP Server, Oracle HTTP Server and Oracle Traffic Director.

If an HTTP Request does not get completed in a definite amount of time, the server remains busy keeping its resources waiting for the rest of the data. If the server keeps too many resources busy, this creates a denial of service.

An HTTP Request not getting completed in a definite amount of time may be due to the below mentioned reasons:

1. Request Payload is large.
2. Request Header information is large.
3. Files attached as part of an HTTP POST/PUT Request are large.
4. Illegal file extension uploads.
    

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.