Forum Discussion

Jason_Keating's avatar
Jason_Keating
Icon for Altostratus rankAltostratus
Nov 26, 2012

SSL_renegotiation_DOS_mitigation

Hi,     I've been looking at this https://devcentral.f5.com/wiki/iRules.Print.aspx?Page=iRules.SSL_renegotiation_DOS_mitigation   I am confused by the iRule, where and when is hs_count ini...
application delivery
dev
devops
iRules
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
Nov 26, 2012
Nice catch. I updated the Codeshare example to set hs_count to 0 in CLIENT_ACCEPTED.

 

 

J, the reason you'd want to use this iRule is if you needed to support renegotiation (secure or insecure) but want to limit how many times a client can attempt to renegotiate the session ID to mitigate a DoS attack.

 

 

Aaron