Connection Rate Limit with log output

Question

Hello,&nbsp;
I have a question about the "Connection Rate Limit".&nbsp;
I recognize that this function is virtual server becomes don't receive new connection after exceeding this threshold.
However, I'd rather not block new connection because I may block connection from normal user other than malicious user's one. (I want to output error message only)&nbsp;
Q.Do you have any suggestions?
  (I think it can be achieved by using iRule)&nbsp;
Best regards,&nbsp;

vijay_e · Answer

See these threads:&nbsp;
https://devcentral.f5.com/questions/help-need-to-create-a-irule-for-limit-client-connection&nbsp;
https://devcentral.f5.com/questions/irule-for-connection-limit&nbsp;

misa_222415 · Answer

Hi Kenta,&nbsp;Perhaps you can use the iRule below.&nbsp;This code will triggered when a connection limit is hit at the pool or pool member level, thus logging the event on log files.&nbsp;when LB_QUEUED { 
log local0. "[IP::local_addr] was queued - [LB::queue depth one 
pool1] / [LB::queue limit depth pool1]" 
   } 
}You can find more information about logging iRules, here: The101: Logging and Comments&nbsp;

Forum Discussion

Connection Rate Limit with log output

2 Replies

Recent Discussions

ASM instance creation

[ASM] - what is "Browser Challange file" ?

[ASM] - HTML5 Cross-Domain Request Enforcement - CLI command

Reverse Proxy Not Behaving

Stable Firmware for F5

Related Content

APM TCP connection limit K38157145

Limit Connections From Client

Virtual server connection limit with HTTP response

virtual server connection rate limit with tables

Connection Limit vs Connection Rate Limit