| Input | Limit or behavior |
|---|---|
| Headers | 16 KiB; up to 100 fields |
| Query string | 8 KiB; at most 1,000 parsed keys |
| POST body | 128 KiB; JSON object only |
| Header timeout | 10 seconds |
| Request timeout | 30 seconds |
| Request body methods | POST only for non-empty bodies |
| Content type | application/json for non-empty bodies |
| Transfer encoding | Requests with this header are rejected |
Send a known Content-Length; do not use chunked requests. Invalid JSON, arrays, primitive bodies, invalid UTF-8, and length mismatches are rejected. Gate and body parser rejections return 400. These limits are fixed in the server.