Allow socket pool size randomization for proxies

Policy ID
AllowSocketPoolSizeRandomizationForProxies
Scope
Computer Configuration, User Configuration
Supported on
Microsoft Windows 7 or later
Source
Google Chrome Policy Templates (version 156.0.8078.80)
Category
Google › Google Chrome

Description

Socket pool size randomization is a security mechanism that prevents attackers from exploiting deterministic capacity limits to learn cross-site information.
If the capacity for a pool is normally 128 sockets, this mechanism randomly caps the pool between 128 and 256.
This can allow up to 2x as many connections to the proxy, but in practice the expected value is more like 1.2x.

This impacts the settings from MaxConnectionsPerProxy and MaxConnectionsPerProxyForWebSocket.
Instead of them defining the upper limit, the upper limit is 2x their values (though again, the expected value in practice is more like 1.2x them).

This is enabled by default for all pools, but this policy allows the feature to be disabled for proxy pools specifically.

Registry

ComputerHKEY_LOCAL_MACHINE
  • AllowSocketPoolSizeRandomizationForProxiesREG_DWORD
UserHKEY_CURRENT_USER
  • AllowSocketPoolSizeRandomizationForProxiesREG_DWORD

Other policies in the same category

View all policies in this category (235)