diff --git a/rpc/http.go b/rpc/http.go
index fe5e4b3093..6388d68961 100644
--- a/rpc/http.go
+++ b/rpc/http.go
@@ -165,7 +165,12 @@ func NewHTTPServer(cors []string, vhosts []string, srv *Server) *http.Server {
 	// Wrap the CORS-handler within a host-handler
 	handler := newCorsHandler(srv, cors)
 	handler = newVHostHandler(vhosts, handler)
-	return &http.Server{Handler: handler}
+	return &http.Server{
+		Handler:      handler,
+		ReadTimeout:  5 * time.Second,
+		WriteTimeout: 10 * time.Second,
+		IdleTimeout:  120 * time.Second,
+	}
 }
 
 // ServeHTTP serves JSON-RPC requests over HTTP.