在IIS中设置maxAllowedContentLength的最佳做法是什么？

Question

In our ASP.NET application some users hit maxAllowedContentLength limit (which is set to 32 megabytes in our application) when sending large POST requests.

Suppose we just blindly increase the limit to half gigabyte - what problems should be expect? How do we know the safe value for this limit?

Answer 1

You really don't want to bump this up site wide as it opens you up to DOS attacks using very large sets of data.

The easiest solution is to simply declare a <location> element for the specific endpoint you are uploading data to, and set the limit to be higher there.