Forum Discussion

Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Sep 17, 2023

Interesting! Haven't done this.

 

Maybe try layered virtual server to do this as seen in the article below as F5 by default uses internal VS for the VPN:

K03113285: Overview of BIG-IP APM layered virtual

https://my.f5.com/manage/s/article/K03113285

K16833554: BIG-IP APM Network Access listeners

https://my.f5.com/manage/s/article/K16833554

 

The other option you can try is to see the per request policy that is generated for API rate limit as limiting the client requests.

 

https://techdocs.f5.com/en-us/bigip-16-1-0/big-ip-access-policy-manager-api-protection/ratelimiting-api-requests/overview-ratelimiting-api-requests.html

 

Edit:

 

For per-request policy you will need a VS that captures the traffic after the VPN VS and decrypts and has http profile, so this will work only for web traffic but 80% of the traffic probably is web in the VPN, so wildcard SSL cert will do the job. Also maybe enable split tunnel as not all traffic to go to the F5 device.