Forum Discussion
George_Watkins_
Sep 09, 2011Historic F5 Account
Hi mraful,
This is a great place to use a honeypot. If you know the approximate rate of requests a normal user would make to a virtual, you can set an upper bound of 10x the normal usage. If that user exceeds that threshold, then throw that user into a separate pool that goes nowhere. The table command (http://devcentral.f5.com/wiki/iRules.table.ashx) is great for counting things and expiring those counters after a certain period of time. Hope this helps,
George