Forum Discussion
samstep
Sep 23, 2016Cirrocumulus
Having a separate granular profile for each hostname is a good practice because (I assume) they are different applications with different URLs, users and usage. If one app is high-usage and another one is low you don't want to block IP addresses connecting to your low-usage application because of statistics gathered for high-usage app.
Re: VIP-wide DOS profile. Do you really need one? Who is going to connect to your VIP if they don't have a valid hostname? If this VIP is only supposed to serve your 3 hostnames you might as well just drop all other traffic.