For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nik's avatar
Nik
Icon for Cirrus rankCirrus
Jun 14, 2010

access restriction - pf vs irule?

we'll be making the transition from a pair of 6800s to a new viprion chassis in a few weeks. the current pair pushes about 900mb/s externally with 5k new connections per second. about a year ago wit...
config
design
Nik's avatar
Nik
Icon for Cirrus rankCirrus
Jul 09, 2010
just in case anyone was wondering what i found.

 

 

all incoming traffic is filtered with pf before it's handed off to tmm. irules are run in tmm and will only be triggered when the appropriate vip is accessed. this makes pf a vastly inferior solution in terms of both latency and hardware resource usage.