Lighttpd consumes > 1GB of memory

[trucex@…]

I am unable to find anything on limiting the memory usage of lighttpd on a per thread basis. A malicious user (assuming this isn't a lighttpd issue) is uploading a file greater than 1GB to my server. Lighttpd never hands the process off since it's constantly reading the data. A combination of being unable to limit the read timeout (even non-idle connections) and being unable to limit the memory consumption of a single thread is a big issue since the server can easily be crashed unless it is monitored constantly.

[anonymous]

You should have a look at:

http://trac.lighttpd.net/trac/wiki/server.max-request-sizeDetails