For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

titankapo_33333's avatar
titankapo_33333
Icon for Nimbostratus rankNimbostratus
Sep 14, 2017

Block a DoS attack (TCP flag and/or UDP flood) with an iRule

Dear community,   I need to set up a new irule for basically mitigate a DoS attack. Specifically should work in case of TCP Flag Attacks ( SYN, ACK, FIN and RST) . Could someone help me with this?...
application delivery
iRules
LTM
security
BinaryCanary_19's avatar
BinaryCanary_19
Historic F5 Account
Sep 22, 2017

I don't think you can inspect TCP flags using irules, so this approach seems unviable. You should look at using one of the standard modules/features built into the product that accomplish this objective as Mr Yates has already suggested.