caption: Allow socket pool size randomization for proxies
default: true
desc: |-
  Socket pool size randomization is a security mechanism that prevents attackers from exploiting deterministic capacity limits to learn cross-site information.
  If the capacity for a pool is normally 128 sockets, this mechanism randomly caps the pool between 128 and 256.
  This can allow up to 2x as many connections to the proxy, but in practice the expected value is more like 1.2x.

  This impacts the settings from <ph name="MAX_CONNECTIONS_PER_PROXY_POLICY_NAME">MaxConnectionsPerProxy</ph> and <ph name="MAX_CONNECTIONS_PER_PROXY_FOR_WEBSOCKET_POLICY_NAME">MaxConnectionsPerProxyForWebSocket</ph>.
  Instead of them defining the upper limit, the upper limit is 2x their values (though again, the expected value in practice is more like 1.2x them).

  This is enabled by default for all pools, but this policy allows the feature to be disabled for proxy pools specifically.
example_value: true
features:
  dynamic_refresh: false
  per_profile: false
items:
- caption: Allow socket pool randomization for proxies
  value: true
- caption: Prevent socket pool randomization for proxies
  value: false
owners:
- file://components/policy/OWNERS
- arichiv@chromium.org
schema:
  type: boolean
supported_on:
- android:150-
- chrome.*:150-
- chrome_os:150-
tags: []
type: main
