raystack / frontier / 31562278057

48%

main: 48%

Pull #1873

github

fix(server): set ReadHeaderTimeout and IdleTimeout on all HTTP servers

The connect, metrics, and UI servers were built with only Addr and
Handler, so clients could hold connections open forever while
withholding request headers or sitting idle.

Add two config fields under app, applied to all three servers:

- read_header_timeout (default 10s): how long the server waits for
  request headers.
- idle_timeout (default 180s): how long an idle keep-alive connection
  stays open. The default exceeds common proxy keep-alive timeouts
  (ALB 60s, nginx 75s); deployments behind a proxy with a longer
  keep-alive should raise it so the proxy never reuses a connection
  the server is closing.

No WriteTimeout on purpose: the connect server streams long export
responses (e.g. ExportAuditRecords) that a write deadline would cut
off.

Fixes #1819

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

11 of 15 new or added lines in 1 file covered. (73.33%)

19206 of 39927 relevant lines covered (48.1%)

15.37 hits per line