web.config标头大小限制会覆盖注册表中的http.sys限制吗? [英] Do web.config header size limits override http.sys limits in the registry?

问题描述

我有一个ASP.Net 4.0应用程序，在Windows 2003的IIS7.5上使用Windows集成身份验证.

I have an ASP.Net 4.0 application using Windows Integrated Authentication on IIS7.5 on Windows 2003.

某些用户通过此消息报告错误:

Some users are reporting errors with this message:

错误请求-请求太长

Bad Request - Request Too Long

HTTP错误400.请求标头的大小太长.

HTTP Error 400. The size of the request headers is too long.

其他人无法成功加载页面，但在加载其他资源和执行AJAX调用时会出错.

Others succeed in loading pages but have errors loading other resources and performing AJAX calls.

其中一个遇到间歇性错误的用户具有大约5700个字符的Kerberos授权标头.该用户是250个AD组的成员.我的理论是，其他HTTP标头(包括cookie)可能总计超过8000个字符，如果使用UTF16进行编码，则总计超过默认的16KB限制.

One of the users experiencing intermittent errors has a Kerberos Authorization header of about 5700 characters. This user is a member of 250 AD groups. My theory is that other HTTP headers (inc cookies) may take the total beyond 8000 characters, which if encoded using UTF16, totals over the default 16KB limit.

此页面介绍了如何使用web.config配置每个HTTP标头上的限制: http://www.iis.net/configreference/system. webserver/security/requestfiltering/requestlimits/headerlimits

This page describes using web.config to configure limits on each HTTP header: http://www.iis.net/configreference/system.webserver/security/requestfiltering/requestlimits/headerlimits

此页面介绍了使用注册表设置来设置HTTP标头大小和总请求大小的限制，默认情况下均为16KB: https://support.microsoft.com/en-us/kb/820129

This page describes using registry settings to set limits on HTTP header size and total request size, by default both 16KB: https://support.microsoft.com/en-us/kb/820129

1. web.config设置是否覆盖HTTP.sys注册表设置?
2. 如果是，是否有一个用于请求总数的web.config设置?

推荐答案

1. 注册表驱动程序具有较高的优先级，因为驱动程序是数据包的入口点.这也是所有传入HTTP数据包的服务器范围设置.

仅当数据包转发到IIS管道时，请求过滤设置才生效.可以将其设置为多个级别以实现细粒度控制.

The request filtering setting only takes effect when the packets are forwarded to IIS pipeline. It can be set at multiple levels to achieve fine grained control.

1. 似乎没有设置.

这篇关于web.config标头大小限制会覆盖注册表中的http.sys限制吗?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！