# Contest Entries **URL:** https://community.f5.com/c/groups/community-contests/contest-entries/33.md [Latest](https://community.f5.com/latest.md) · [Categories](https://community.f5.com/categories.md) · [Tags](https://community.f5.com/tags.md) --- ## [About the Contest Entries category](https://community.f5.com/t/about-the-contest-entries-category/133)
**Author:** [@system](https://community.f5.com/u/system)\ **Replies:** 0\ **Last updated:** [July 17, 2026, 8:17pm UTC](https://community.f5.com/t/about-the-contest-entries-category/133 "2026-07-17T20:17:53Z")
(Replace this first paragraph with a brief description of your new category. This guidance will appear in the category selection area, so try to keep it below 200 characters.) Use the following paragraphs for a longer d… --- ## [MCP Gateway Shield: governing AI agent tool-calls from the BIG-IP you already have](https://community.f5.com/t/mcp-gateway-shield-governing-ai-agent-tool-calls-from-the-big-ip-you-already-have/77300)
**Author:** [@Quiroman81](https://community.f5.com/u/Quiroman81)\ **Replies:** 3\ **Last updated:** [July 31, 2026, 3:56pm UTC](https://community.f5.com/t/mcp-gateway-shield-governing-ai-agent-tool-calls-from-the-big-ip-you-already-have/77300 "2026-07-31T15:56:54Z")
Theme: AI Infrastructure — Traffic management and security for AI workloads Platform: BIG-IP LTM only (no ASM, no AWAF, no APM). Tested on TMOS 17.1.5 Tags: APPWORLD2026 · IRULES · LATAM Several of our clients already r… --- ## [WS-Exfil-Shield: Catching What WAFs Miss After the 101 Handshake](https://community.f5.com/t/ws-exfil-shield-catching-what-wafs-miss-after-the-101-handshake/77071)
**Author:** [@Goerle\_dev](https://community.f5.com/u/Goerle_dev)\ **Replies:** 1\ **Last updated:** [May 8, 2026, 10:01am UTC](https://community.f5.com/t/ws-exfil-shield-catching-what-wafs-miss-after-the-101-handshake/77071 "2026-05-08T10:01:05Z")
Problem WAFs inspect the WebSocket upgrade and individual frames against signatures and content profiles, but they do not correlate behavior across the lifetime of an established WebSocket session. All major WAF v… --- ## [SwagWAF Wins The Budget Bodyguard Award](https://community.f5.com/t/swagwaf-wins-the-budget-bodyguard-award/76983)
**Author:** [@Joe\_Negron\_NYC](https://community.f5.com/u/Joe_Negron_NYC)\ **Replies:** 0\ **Last updated:** [May 5, 2026, 11:32pm UTC](https://community.f5.com/t/swagwaf-wins-the-budget-bodyguard-award/76983 "2026-05-05T23:32:52Z")
EXECUTIVE SUMMARY Executive Infograffic - Generated by ChatGPT ENGINEERING DETAILS: In The Weeds AppWorld’26 - iRules Contest Entry: SwagWAF 1. Problem Statement The Challenge: AI/LLM API endpoints face unique thre… --- ## [Layered Virtual Server iRule Solution for ICAP File Upload Scanning on BIG-IP](https://community.f5.com/t/layered-virtual-server-irule-solution-for-icap-file-upload-scanning-on-big-ip/77073)
**Author:** [@ChristianEssel](https://community.f5.com/u/ChristianEssel)\ **Replies:** 1\ **Last updated:** [May 2, 2026, 2:38pm UTC](https://community.f5.com/t/layered-virtual-server-irule-solution-for-icap-file-upload-scanning-on-big-ip/77073 "2026-05-02T14:38:46Z")
Problem Our client is running a WebApp where his customers are able to upload documents. A BIG-IP Cluster is used to balance the WebApp. Our client wanted to scan the files via an existing ICAP Solution. After several te… --- ## [Generic iRule based on datagroup parsing](https://community.f5.com/t/generic-irule-based-on-datagroup-parsing/77076)
**Author:** [@Robb-Fr](https://community.f5.com/u/Robb-Fr)\ **Replies:** 3\ **Last updated:** [April 28, 2026, 8:54am UTC](https://community.f5.com/t/generic-irule-based-on-datagroup-parsing/77076 "2026-04-28T08:54:28Z")
Problem This iRule is derived from a customer’s migration project (anonymized and cut from some content). This customer needed to migrate hundreds of Apache virtual hosts to BIG-IP. From this big project, with many other… --- ## [SUPER-WEBSOCKET-HANDSHAKE-LOGGER™® (SWHL) iRule](https://community.f5.com/t/super-websocket-handshake-logger-swhl-irule/77075)
**Author:** [@Kai\_Wilke](https://community.f5.com/u/Kai_Wilke)\ **Replies:** 0\ **Last updated:** [April 27, 2026, 9:20pm UTC](https://community.f5.com/t/super-websocket-handshake-logger-swhl-irule/77075 "2026-04-27T21:20:37Z")
The contest submission covers a so called SUPER-WEBSOCKET-HANDSHAKE-LOGGER™® (SWHL) iRule. The genius idea behind this iRule is to log and correlate every single WEBSOCKET-Handshakes via the WS\_REQUEST and WS\_RESPONSE e… --- ## [WS-Shield: WebSocket Abuse Detection & Adaptive Enforcement Gateway](https://community.f5.com/t/ws-shield-websocket-abuse-detection-adaptive-enforcement-gateway/77069)
**Author:** [@Injeyan\_Kostas](https://community.f5.com/u/Injeyan_Kostas)\ **Replies:** 0\ **Last updated:** [April 27, 2026, 12:53pm UTC](https://community.f5.com/t/ws-shield-websocket-abuse-detection-adaptive-enforcement-gateway/77069 "2026-04-27T12:53:13Z")
Problem WebSocket traffic introduces a fundamentally different security model from traditional HTTP. After the initial upgrade request, communication becomes long-lived, bidirectional, and frame-based, with no ongoing re… --- ## [iRules Contest Entry Example](https://community.f5.com/t/irules-contest-entry-example/77054)
**Author:** [@JRahm](https://community.f5.com/u/JRahm)\ **Replies:** 0\ **Last updated:** [April 20, 2026, 6:30pm UTC](https://community.f5.com/t/irules-contest-entry-example/77054 "2026-04-20T18:30:45Z")
Problem Clearly state the problem you are trying to solve and why iRules are used as a solution. Provide as much context as you want to make sure the problem is well understood by the judges. Solution Give a high level … --- ## [JSON-query'ish meta language for iRules](https://community.f5.com/t/json-queryish-meta-language-for-irules/76959)
**Author:** [@Daniel\_Wolf](https://community.f5.com/u/Daniel_Wolf)\ **Replies:** 1\ **Last updated:** [March 20, 2026, 9:32pm UTC](https://community.f5.com/t/json-queryish-meta-language-for-irules/76959 "2026-03-20T21:32:31Z")
Intro Jason Rahm recently dropped his “Working with JSON data in iRules” series, which included a few JSON challenges and a subtle hint \[string toupper \[string replace Jason 1 1 “”\]\] about the upcoming iRule challenge a… --- ## [LLM Prompt Injection Detection & Enforcement](https://community.f5.com/t/llm-prompt-injection-detection-enforcement/76962)
**Author:** [@Injeyan\_Kostas](https://community.f5.com/u/Injeyan_Kostas)\ **Replies:** 2\ **Last updated:** [March 16, 2026, 11:34pm UTC](https://community.f5.com/t/llm-prompt-injection-detection-enforcement/76962 "2026-03-16T23:34:14Z")
Problem As enterprises integrate AI APIs, OpenAI, Azure OpenAI, Anthropic, and self-hosted LLMs, into production applications, a critical and largely unaddressed attack surface has emerged: \*\*prompt injection\*\*. Unlike … --- ## [LLM Streaming Session Pinning for WebSocket AI Gateways](https://community.f5.com/t/llm-streaming-session-pinning-for-websocket-ai-gateways/76964)
**Author:** [@Antonio\_LR\_Mex](https://community.f5.com/u/Antonio_LR_Mex)\ **Replies:** 0\ **Last updated:** [March 11, 2026, 9:05am UTC](https://community.f5.com/t/llm-streaming-session-pinning-for-websocket-ai-gateways/76964 "2026-03-11T09:05:53Z")
Problem Modern AI applications increasingly rely on real-time streaming responses to deliver tokens progressively to users. This pattern is common in: conversational assistants copilots agent-based systems chat applica… --- ## [AI Token Limit Enforcement](https://community.f5.com/t/ai-token-limit-enforcement/76963)
**Author:** [@Marcio\_G\_1](https://community.f5.com/u/Marcio_G_1)\ **Replies:** 0\ **Last updated:** [March 11, 2026, 6:45am UTC](https://community.f5.com/t/ai-token-limit-enforcement/76963 "2026-03-11T06:45:57Z")
Problem Companies that run AI inference services on-premise instead of using public cloud providers often do so to keep sensitive data local. However, local LLM infrastructure introduces a new challenge: resource control… --- ## [AI/Bot Traffic Throttling iRule (UA Substring + IP Range Mapping)](https://community.f5.com/t/ai-bot-traffic-throttling-irule-ua-substring-ip-range-mapping/76961)
**Author:** [@TimRiker](https://community.f5.com/u/TimRiker)\ **Replies:** 0\ **Last updated:** [March 11, 2026, 5:56am UTC](https://community.f5.com/t/ai-bot-traffic-throttling-irule-ua-substring-ip-range-mapping/76961 "2026-03-11T05:56:14Z")
Problem Tags: appworld 2026, vegas, irules Created by Tim Riker using AI for the DevCentral competition. Written entirely by ChatGPT. Executive Summary This iRule provides a practical, production-ready method for throt… --- ## [Rate limiting WebSocket messages for Agents](https://community.f5.com/t/rate-limiting-websocket-messages-for-agents/76958)
**Author:** [@mcabral10](https://community.f5.com/u/mcabral10)\ **Replies:** 0\ **Last updated:** [March 11, 2026, 5:27am UTC](https://community.f5.com/t/rate-limiting-websocket-messages-for-agents/76958 "2026-03-11T05:27:59Z")
Problem Protecting WebSocket-based AI services from Overload caused by high message rates, temporary spikes via burst control, resource waste from duplicate or repeated messages, aggressive/malicious agents with temporar… --- ## [Logging/Blocking possible prompt injection](https://community.f5.com/t/logging-blocking-possible-prompt-injection/76960)
**Author:** [@BeCur](https://community.f5.com/u/BeCur)\ **Replies:** 0\ **Last updated:** [March 11, 2026, 5:27am UTC](https://community.f5.com/t/logging-blocking-possible-prompt-injection/76960 "2026-03-11T05:27:26Z")
Problem Prompt injection attacks using various phrases Solution Using an Data Group driven Irule to look up common phrases to check against in the payload for prompt injection. Using a data group allows for quick updat…