For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

titankapo_33333's avatar
titankapo_33333
Icon for Nimbostratus rankNimbostratus
Sep 14, 2017

Block a DoS attack (TCP flag and/or UDP flood) with an iRule

Dear community,   I need to set up a new irule for basically mitigate a DoS attack. Specifically should work in case of TCP Flag Attacks ( SYN, ACK, FIN and RST) . Could someone help me with this?...
application delivery
iRules
LTM
security
Faruk_AYDIN's avatar
Faruk_AYDIN
Icon for Altostratus rankAltostratus
Sep 25, 2017

Hi Guy,

You can have a look at TCP/IP flags and options, If you use the packet filters (
Network > Packet Filters
). Event name is 
FLOW_INIT
. Link is here. Then use DATAGRAM commands to access the flags and options. Its link is here