
Security News
minimatch Patches 3 High-Severity ReDoS Vulnerabilities
minimatch patched three high-severity ReDoS vulnerabilities that can stall the Node.js event loop, and Socket has released free certified patches.
http-pooling-agent
Advanced tools
HTTP agent with smart socket pool.
The HTTP agent is based on original node HTTP agent with some modifications in order to:
freeSocketsTimeout option to set up this inactivity period (in milliseconds).Unlike other available HTTP agents, sockets are not opened forever. After an inactivity period, they are closed to save resources.
npm install http-pooling-agent
var http = require('http'),
httpAgent = require('http-pooling-agent');
var agent = new httpAgent.Agent({
freeSocketsTimeout: 10000
});
var options = {
host: 'localhost',
port: 3000,
path: '/',
method: 'GET',
agent: agent
};
var req = http.request(options, function (res) {
});
req.end();
var https = require('https'),
httpAgent = require('http-pooling-agent');
var agent = new httpAgent.SSL.Agent({
keepAliveMsecs: 5000
});
var options = {
host: 'localhost',
port: 8443,
path: '/',
method: 'GET',
agent: agent
};
var req = https.request(options, function (res) {
});
req.end();
The agent is configured with a set of options:
| Option | Type | Default | Description |
|---|---|---|---|
| keepAlive | Boolean | true | Keep sockets around in a pool to be used by other requests in the future |
| keepAliveMsecs | Integer | 30000 | When using HTTP KeepAlive, how often to send TCP KeepAlive packets over sockets being kept alive. Only relevant if keepAlive is set to true. |
| maxSockets | Number | Infinity | Maximum number of sockets to allow per host. |
| maxFreeSockets | Number | Infinity | Maximum number of sockets to leave open in a free state. Only relevant if keepAlive is set to true. |
| freeSocketsTimeout | Integer | 45000 | Maximum inactivity period (in milliseconds) to keep open an idle socket. |
NOTE: These options are the same options than the default agent with two differences:
freeSocketsTimeout does not exist in the default agent.Copyright 2015 Telefónica Investigación y Desarrollo, S.A.U
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
FAQs
HTTP agent with smart socket pool
The npm package http-pooling-agent receives a total of 1 weekly downloads. As such, http-pooling-agent popularity was classified as not popular.
We found that http-pooling-agent demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
minimatch patched three high-severity ReDoS vulnerabilities that can stall the Node.js event loop, and Socket has released free certified patches.

Research
/Security News
Socket uncovered 26 malicious npm packages tied to North Korea's Contagious Interview campaign, retrieving a live 9-module infostealer and RAT from the adversary's C2.

Research
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.