System information
Adobe documentation - Confidential 
Setting 
Default 
Recommendation 
Description 
Maximum number 
of POST request 
parameters 
100 
50 or as low as 
your application 
allows. 
Set this to the maximum number of 
form fields you have on any given 
page. Allowing too many form fields 
may allow for a DOS attack known 
as HashDOS. See 
http://www.petefreitag.com/item/8
08.cfm 
Maximum size of 
post data 
100MB 
As low as possible 
If your application does not deal 
with large HTTP POST operations 
(such as file uploads, or large web 
service requests), reduce this size to 
1MB.  
If the application does allow uploads 
of files set this to the maximum size 
you want to allow. 
You should also be able to specify a 
HTTP Request size limit on your web 
server. 
Request Throttle 
Threshold 
4MB 
1MB 
ColdFusion will throttle any request 
larger than this value. If your 
application requires a large number 
of concurrent file uploads to take 
place, you may need to increase this 
setting. 
Request Throttle 
Memory 
200MB 
100MB on 32 bit 
installations. 
On a 32 bit installation the default 
value would be close to 20% of the 
heap. 64 bit servers allow for much 
larger heap sizes. Aim for 10% of the 
maximum heap size as an upper 
limit for this setting. 
Adobe documentation - Confidential 










