4k buffer for a single request is enough
sanitize header