Forum Discussion

waterfall_10467's avatar
waterfall_10467
Icon for Altostratus rankAltostratus
Jul 15, 2012

PREVENT THE SAME USER

Hello,

 

 

Within the same time the same user, How can we prevent from making the multiple connections to different servers in different ?

 

 

by the way traffic is not http that is tcp traffic. I guess we need to write an irule related to ip address.

 

 

Please help me about this matter

 

 

Thank you in advance for your support

 

 

Kind regards,

 

5 Replies

  • is this applicable?

     

     

    iRule::ology; Connection Limiting Take 2 by Colin

     

    https://devcentral.f5.com/Tutorials/TechTips/tabid/63/articleType/ArticleView/articleId/1086427/iRuleology-Connection-Limiting-Take-2.aspx
  • Hi Nitass,

     

     

    Thank you for your quick reply.However,a restriction isn't wanted on the virtual server. let me be clear , If a client logged on to back end server and it's connection is still going on, within the same time, client won't be able to connect to same or different server again. is that possible for you?

     

     

    please help me about the matter.

     

     

    Thank you in advance

     

  • Hi can,

     

     

    iRules are event driven and applied to a Virtual Server(s).

     

     

    If you want to limit a client to one server then it must be done so within the scope of a Virtual Server or multiple Virtual Servers.

     

     

    If the target server(s) are on a VLAN owned by the BIG-IP then you should still have a Forwarder Virtual Server to apply an iRule to and you could still use the methodology pointed out by Nitass.

     

     

    Hope this helps.
  • Hi Michael,

     

     

    I guess I have explained you wrong the existing needing. As you mentioned in your response, as a matter of course we have to do this on the virtual server.However, We do not want to apply any rate limiting on the virtual server in total. we just want that If a client logged on to server over the virtual server and its session still is active on the virtual server ,it will never be able to make second connection without disconnecting.

     

     

    Please help me about this matter

     

     

    thank you in advance.
  • we just want that If a client logged on to server over the virtual server and its session still is active on the virtual server ,it will never be able to make second connection without disconnecting. have you tried irule in the article? i still think it is applicable for your case.

     

     

    in this line, you may change from 1000 to 2 in case if you want to have only 1 connection per client address.

     

     

    if { [table keys -subtable $tbl -count] > 1000 } {