Allow socket pool size randomization for proxies

Policy ID
AllowSocketPoolSizeRandomizationForProxies
Scope
Computer Configuration, User Configuration
Supported on
Microsoft Edge version 150, Windows 7 or later
Source
Microsoft Edge Policy Templates (version 155.0.4283.45)
Category
Microsoft Edge

Description

Controls whether Microsoft Edge randomizes socket pool sizes for proxy connections.

Socket pool size randomization is a security mechanism that helps prevent attackers from using deterministic connection limits to infer cross-site information. For example, if the configured proxy socket pool limit is 128, Microsoft Edge can randomly set the effective limit between 128 and 256. This can allow up to twice as many proxy connections, though the expected increase is closer to 1.2x in practice.

This policy affects the limits configured by the 'MaxConnectionsPerProxy' (Maximum number of concurrent connections to the proxy server for non-WebSocket requests) and 'MaxConnectionsPerProxyForWebSocket' (Maximum number of concurrent connections to the proxy server for WebSocket requests) policies. When this policy is enabled, the effective upper limit can be randomized up to 2x the values configured by those policies.

If you enable this policy or don't configure it, Microsoft Edge enables socket pool size randomization for proxy connections.

If you disable this policy, Microsoft Edge disables socket pool size randomization for proxy connections. The values configured by 'MaxConnectionsPerProxy' and 'MaxConnectionsPerProxyForWebSocket' are used as the upper limits without randomization.

Registry

ComputerHKEY_LOCAL_MACHINE
  • AllowSocketPoolSizeRandomizationForProxiesREG_DWORD
UserHKEY_CURRENT_USER
  • AllowSocketPoolSizeRandomizationForProxiesREG_DWORD

Other policies in the same category

View all policies in this category (438)