For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dave_24602's avatar
Dave_24602
Icon for Nimbostratus rankNimbostratus
Aug 19, 2009

BugIp icmp packet drop thresholds....

Hello All,     I was windering if there's a way to raise the icmp packet drop thresholds within the Bigip, maybe via a DB variable?   You see I have a client that has a backend applica...
management
monitoring
Cspillane_18296's avatar
Cspillane_18296
Icon for Nimbostratus rankNimbostratus
Mar 11, 2010
Hello Dave,

 

 

not sure how useful this will be but I dug it up from a previous case I worked on, might be relevant:

 

 

BigDB settings

 

 

* The TM.MaxRejectRate BigDB key can reduce the effects of a denial of service attack by allowing you to limit the number of TCP RSTs or ICMP unreachable packets that the BIG-IP sends in response to incoming connections that cannont be matched with virtual server connections.

 

 

Note: For more information, refer to SOL9259: Limiting the rate at which the BIG-IP system issues TCP RSTs or ICMP unreachable packets.

 

https://support.f5.com/kb/en-us/solutions/public/9000/200/sol9259.html

 

 

* The TM.MaxICMPRate BigDB key can reduce the effects of a denial of service attack by allowing you to limit the number of responses the BIG-IP LTM will send for ICMP errors and ICMP unreachable events.

 

 

Note: For more information, refer to SOL7113: Limiting responses from BIG-IP LTM for ICMP errors and ICMP Unreachable events.

 

https://support.f5.com/kb/en-us/solutions/public/7000/100/sol7113.html