Appropriate limit for maxResponseBodySize

Hi, I recently started getting a lot of warnings in my log for each of the applications I set up forward auth (through Authentik) for.

WRN ForwardAuth 'maxResponseBodySize' is not configured, allowing unlimited response body size which can lead to DoS attacks and memory exhaustion. Please set an appropriate limit

Where do I set this limit? in my traefik config or in authentik? Also what is an ‘appropriate limit’?

Thanks

1 Like

Let me Internet search that for you "traefik maxResponseBodySize":

Traefik ForwardAuth doc

It even contains "Guidelines for Setting maxBodySize"

Guidelines are refering for maxBodySize which is a different attribute

True. I guess for maxResponseBodySize there is no real recommendation, My understanding is that ForwardAuth returns the auth service login page. I guess you could try with 1MB (?) and go lower. It will probably mostly depend on the used logo image, if any.