Discussion:
AspMaxRequestEntityAllowed
(too old to reply)
Trapulo
2008-12-05 11:00:20 UTC
Permalink
How is a security or stability flag to increase the value of
AspMaxRequestEntityAllowed from 200kB (IIS default setting) to 2 o 20 MB?

thanks
WenJun Zhang[msft]
2008-12-08 08:52:28 UTC
Permalink
Hi Trapulo,

The AspMaxRequestEntityAllowed property specifies the maximum number of
bytes allowed in the entity body of an ASP request. If we have this set to
2 MB, then the largest size of the asp request is 2 MB and the request is
terminated if it exceeds the 2 MB.

Imagine many client hitting the server simultaneously and all of them
uploading a file > 2MB, so each request will keep a thread busy till the
time the file is completely uploaded. Therefore a bigger value of
AspMaxRequestEntityAllowed may cause threadpool starvation kinda issue
(denial of service attacks etc.), but this is still isolated only to
classic ASP pages only, since we can have altogether different application
pool for ASP.NET.

In case of ASP.Net, this is controlled by maxRequestLength:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpgenref/ht
ml/gngrfhttpruntimesection.asp

In the article 327659, it says the maximum value that can be set is
1,073,741,824 bytes. Setting this to 2 MB should not cause any problems on
your server except for what I mentioned above.

You may receive a 403 error when you use an ASP request to upload a large
file in Internet Information Services
http://support.microsoft.com/?id=327659

Please let me know if you have any further question on this.

Have a great week.

Sincerely,

WenJun Zhang

Microsoft Online Community Support

Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
***@microsoft.com.

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/en-us/subscriptions/aa948868.aspx#notifications.

MSDN Managed Newsgroup support offering is for non-urgent issues where an
initial response from the community or a Microsoft Support Engineer within
2 business day is acceptable. Please note that each follow up response may
take approximately 2 business days as the support professional working with
you may need further investigation to reach the most efficient resolution.
The offering is not appropriate for situations that require urgent,
real-time or phone-based interactions. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/en-us/subscriptions/aa948874.aspx
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
WenJun Zhang[msft]
2008-12-10 11:03:12 UTC
Permalink
Hi Trapulo,

Just wonder if you have any further question of this issue?

Thanks.

Sincerely,

WenJun Zhang

Microsoft Online Community Support

Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
***@microsoft.com.

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/en-us/subscriptions/aa948868.aspx#notifications.

MSDN Managed Newsgroup support offering is for non-urgent issues where an
initial response from the community or a Microsoft Support Engineer within
2 business day is acceptable. Please note that each follow up response may
take approximately 2 business days as the support professional working with
you may need further investigation to reach the most efficient resolution.
The offering is not appropriate for situations that require urgent,
real-time or phone-based interactions. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/en-us/subscriptions/aa948874.aspx
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
Trapulo
2008-12-22 08:23:29 UTC
Permalink
Thank you, this is very clear

Just two other questions:
- whitch is default value in Windows Server? I've found some reference to
256KB, some other to 1 MB, etc..
- is this possible to change this value only for a single web site or web
application folder?

Thanks
Post by WenJun Zhang[msft]
Hi Trapulo,
The AspMaxRequestEntityAllowed property specifies the maximum number of
bytes allowed in the entity body of an ASP request. If we have this set to
2 MB, then the largest size of the asp request is 2 MB and the request is
terminated if it exceeds the 2 MB.
Imagine many client hitting the server simultaneously and all of them
uploading a file > 2MB, so each request will keep a thread busy till the
time the file is completely uploaded. Therefore a bigger value of
AspMaxRequestEntityAllowed may cause threadpool starvation kinda issue
(denial of service attacks etc.), but this is still isolated only to
classic ASP pages only, since we can have altogether different application
pool for ASP.NET.
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpgenref/ht
ml/gngrfhttpruntimesection.asp
In the article 327659, it says the maximum value that can be set is
1,073,741,824 bytes. Setting this to 2 MB should not cause any problems on
your server except for what I mentioned above.
You may receive a 403 error when you use an ASP request to upload a large
file in Internet Information Services
http://support.microsoft.com/?id=327659
Please let me know if you have any further question on this.
Have a great week.
Sincerely,
WenJun Zhang
Microsoft Online Community Support
Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/en-us/subscriptions/aa948868.aspx#notifications.
MSDN Managed Newsgroup support offering is for non-urgent issues where an
initial response from the community or a Microsoft Support Engineer within
2 business day is acceptable. Please note that each follow up response may
take approximately 2 business days as the support professional working with
you may need further investigation to reach the most efficient resolution.
The offering is not appropriate for situations that require urgent,
real-time or phone-based interactions. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/en-us/subscriptions/aa948874.aspx
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
David Wang
2008-12-22 17:56:33 UTC
Permalink
The default value changed over time, so there is no "default value" in
Windows Server. You need to clarify by specifying "which version".

Additionally, you seem to be mentioning a couple of default values of
different properties, so please be clear with which limit and default
value you are interested in.

The documentation which includes all the default values of IIS6
Metabase Properties can be found here:
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/cde669f1-5714-4159-af95-f334251c8cbd.mspx?mfr=true

For example, the default value for a couple of common ASP limits that
people are interested with on IIS6 are:
AspMaxRequestEntityAllowed = 200KB
AspBufferingLimit = 4MB

To be clear, these are ASP Limits. They do not affect other software
like ASP.Net, PHP, Perl, etc. Those software may (and often should)
have their own limits and configured default values.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//
Post by Trapulo
Thank you, this is very clear
- whitch is default value in Windows Server? I've found some reference to
256KB, some other to 1 MB, etc..
- is this possible to change this value only for a single web site or web
application folder?
Thanks
Post by WenJun Zhang[msft]
Hi Trapulo,
The AspMaxRequestEntityAllowed property specifies the maximum number of
bytes allowed in the entity body of an ASP request. If we have this set to
2 MB, then the largest size of the asp request is 2 MB and the request is
terminated if it exceeds the 2 MB.
Imagine many client hitting the server simultaneously and all of them
uploading a file > 2MB, so each request will keep a thread busy till the
time the file is completely uploaded. Therefore a bigger value of
AspMaxRequestEntityAllowed may cause threadpool starvation kinda issue
(denial of service attacks etc.), but this is still isolated only to
classic ASP pages only, since we can have altogether different application
pool for ASP.NET.
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpge...
ml/gngrfhttpruntimesection.asp
In the article 327659, it says the maximum value that can be set is
1,073,741,824 bytes. Setting this to 2 MB should not cause any problems on
your server except for what I mentioned above.
You may receive a 403 error when you use an ASP request to upload a large
file in Internet Information Services
http://support.microsoft.com/?id=327659
Please let me know if you have any further question on this.
Have a great week.
Sincerely,
WenJun Zhang
Microsoft Online Community Support
Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/en-us/subscriptions/aa948868.aspx#notificat....
MSDN Managed Newsgroup support offering is for non-urgent issues where an
initial response from the community or a Microsoft Support Engineer within
2 business day is acceptable. Please note that each follow up response may
take approximately 2 business days as the support professional working with
you may need further investigation to reach the most efficient resolution.
The offering is not appropriate for situations that require urgent,
real-time or phone-based interactions. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/en-us/subscriptions/aa948874.aspx
==================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.- Hide quoted text -
- Show quoted text -
Loading...