Hi Chittaranjan,
you may try one of the iRules below as a staring point.
The first iRule uses two independent counters to seperately track requests for a given PID or Device ID. And the second iRule uses a single counter to track requests for the combined PID and Device ID information.
iRule 1:
when HTTP_REQUEST {
Track and enfoce request for specific PIDs
if { [set pid [URI::query [HTTP::uri] "pid"]] ne "" } then {
set count [table incr "PID_$pid"]
if { $count == 1 } then {
table set "PID_$pid" 1 indef 60
Initialize table data and allow the request
} elseif { $count < 100 } then {
Allow the request
} elseif { $count == 100 } then {
Log and block the request
log local0.debug "Blocked [IP::client_addr] with PID \"$pid\". Too much requests..."
HTTP::respond 503 content "Service temporary unavailable - too much request"
return
} else {
Block the request
HTTP::respond 503 content "Service temporary unavailable - too much request"
return
}
}
Track and enfoce request for specific Device IDs
if { [set did [URI::query [HTTP::uri] "device_id"]] ne "" } then {
set count [table incr "PID_$did"]
if { $count == 1 } then {
Initialize table data and allow the request
table set "DID_$did" 1 indef 60
} elseif { $count < 100 } then {
Allow the request
} elseif { $count == 100 } then {
Log and block the request
log local0.debug "Blocked [IP::client_addr] with Device ID \"$pid\". Too much requests..."
HTTP::respond 503 content "Service temporary unavailable - too much request"
return
} else {
Block the request
HTTP::respond 503 content "Service temporary unavailable - too much request"
return
}
}
iRule 2:
when HTTP_REQUEST {
Track and enfoce request for specific PID / Device ID combinations
if { ( [set pid [URI::query [HTTP::uri] "pid"]] ne "" )
and ( [set did [URI::query [HTTP::uri] "device_id"]] ne "" ) } then {
set count [table incr "ID_$pid$did"]
if { $count == 1 } then {
table set "ID_$pid$did" 1 indef 60
Initialize table data and allow the request
} elseif { $count < 100 } then {
Allow the request
} elseif { $count == 100 } then {
Log and block the request
log local0.debug "Blocked [IP::client_addr] with PID \"$pid\" and Device ID \"$did\". Too much requests..."
HTTP::respond 503 content "Service temporary unavailable - too much request"
return
} else {
Block the request
HTTP::respond 503 content "Service temporary unavailable - too much request"
return
}
}
}
Cheers, Kai
Nimbostratus
