Restrict TPS on a VIP which is SSL Enabled

Question

We are using an F5 device to handle incomming connections from 500K endpoints which sends an status update every few minutes via SSL using HTTPS, When the Engg team pushes some changes to the endpoints they gradually end-up sending more TPS on the F5 device causing the F5 to spike on the CPU above 90% , Can i setup a Particular VIP to limit the number of TPS at a particular value and then the endpoints retry. Also can we setup Queue for a VIP.&nbsp;
Please share any information on the above.&nbsp;

kevin_stewart · Answer

Request queuing is a function of pools, so not really applicable here:&nbsp;
https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm-implementations-11-3-0/26.html?sr=47465626&nbsp;
One possible idea then is to implement connection rate limiting at the VIP itself:&nbsp;
https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm-implementations-11-3-0/27.html?sr=47465646&nbsp;

arpydays · Answer

I had a similar situation with telemetry devices, not with F5 though but we didn't want all devices sending at once and saturating our links. So business rules were applied to the system to spread out events that caused bulk simultaneous connections. This could include offsetting the polling interval in the devices and/or spreading update pushes out so that only a certain number of devices were done at once.

navin_130677 · Answer

Has anyone tried Connection Limits or Connection Rate Limit on a VIP ? Can you help to understand this better ?

navin_130677 · Answer

Has anyone tried Connection Limits or Connection Rate Limit on a VIP ? Can you help to understand this better ?

Forum Discussion

Restrict TPS on a VIP which is SSL Enabled

4 Replies

Recent Discussions

Geo Fence in ASM through irule for URI

Client certificate Authentication - open multiple tabs

google autenticator broken barcode

Chrome V 124+ on MacOS - Virtual Server Access Issue

vulnerabilities (CVE-2020-36363), CVE-2016-0736,CVE-2019-6593-FOR VERSION BIGIP LTM-16.1.4

Related Content

SSL Orchestrator Advanced Use Cases: Enabling GCloud Organization Restrictions

Office 365 Tenant Restrictions

Enabling Azure Active Directory Tenant Restrictions with F5

Enable telnet on SSH

Enable SAML Service Provider on F5 Distributed Cloud Application