Forum Discussion

Webtrends_IT_39's avatar
Webtrends_IT_39
Icon for Nimbostratus rankNimbostratus
Sep 05, 2014
Solved

Limiting HTTP/HTTPS GET and POST Flood Attacks using an iRule

Hey folks,   I am interested in seeing if there is an existing iRule that can rate limit HTTP/HTTPS GET/POST Flood Attacks. I have search DevCentral and found a few similar but many look as though...
application delivery
ddos
devops
get
iRules
post
security
nitass_89166's avatar
nitass_89166
Icon for Noctilucent rankNoctilucent
Sep 06, 2014

In my specific instance, I want to limit based on source IP. If the source goes over the specific POST/GET limit within a specified time frame, they then are dropped automatically for a specified period of time.

 

are these applicable?

 

v10.1 - The table Command - Examples by spark (Limiting POST Requests Per User)

 

https://devcentral.f5.com/articles/v101-the-table-command-examples

 

Limit the number of HTTP requests by a client within a specified time by Bhanu

 

https://devcentral.f5.com/wiki/iRules.Limit-the-number-of-HTTP-requests-by-a-client-within-a-specified-time.ashx

 

  • Webtrends_IT_39's avatar
    Webtrends_IT_39
    Icon for Nimbostratus rankNimbostratus
    Sep 08, 2014
    Thank you, looks as though the second link will work! :)