AllowSocketPoolSizeRandomizationForProxies

Allow socket pool size randomization for proxies

Supported versions

  • Windows: ≥ 150
  • macOS: ≥ 150
  • Android: ≥ 150
  • iOS: Not supported

Description

Controls whether Microsoft Edge randomizes socket pool sizes for proxy connections.

Socket pool size randomization is a security mechanism that helps prevent attackers from using deterministic connection limits to infer cross-site information. For example, if the configured proxy socket pool limit is 128, Microsoft Edge can randomly set the effective limit between 128 and 256. This can allow up to twice as many proxy connections, though the expected increase is closer to 1.2x in practice.

This policy affects the limits configured by the MaxConnectionsPerProxy and MaxConnectionsPerProxyForWebSocket policies. When this policy is enabled, the effective upper limit can be randomized up to 2x the values configured by those policies.

If you enable this policy or don't configure it, Microsoft Edge enables socket pool size randomization for proxy connections.

If you disable this policy, Microsoft Edge disables socket pool size randomization for proxy connections. The values configured by MaxConnectionsPerProxy and MaxConnectionsPerProxyForWebSocket are used as the upper limits without randomization.

Supported features

  • Can be mandatory: Yes
  • Can be recommended: No
  • Dynamic Policy Refresh: No - Requires browser restart
  • Per Profile: No
  • Applies to a profile that is signed in with a Microsoft account: Yes

Data type

  • Boolean

Windows information and settings

Group Policy (ADMX) info

  • GP unique name: AllowSocketPoolSizeRandomizationForProxies
  • GP name: Allow socket pool size randomization for proxies
  • GP path (Mandatory): Administrative Templates/Microsoft Edge
  • GP path (Recommended): N/A
  • GP ADMX file name: MSEdge.admx

Example value

Enabled

Registry settings

  • Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge
  • Path (Recommended): N/A
  • Value name: AllowSocketPoolSizeRandomizationForProxies
  • Value type: REG_DWORD

Example registry value

0x00000001

Mac information and settings

  • Preference Key name: AllowSocketPoolSizeRandomizationForProxies
  • Example value:
<true/>

Android information and settings

  • Preference Key name: AllowSocketPoolSizeRandomizationForProxies
  • Example value:
true

See also