This story aims to close the gap by:

• Setting sane defaults and making timeouts configurable

• Enforcing header/body/request size limits

• Logging request violations

• Disabling HTTP/2 where applicable

• Improving observability and safety of the HTTP surface

These changes will enhance ESO's resilience to slowloris-style DoS attacks, excessive request sizes, and misconfigured clients.

Refer :- https://docs.google.com/document/d/1cSJhgSS2VfGfjsYAlxJ_3t4I14JXGzRfQivY0NaEi_Q/edit?tab=t.0#heading=h.c6cdlrlyu7ss for more info