Can iRule Reject Requests Based on 'True-Client-IP'

Without checking your syntax, the logic looks OK (It'd have done it slightly differently, but that's just optimisation).

 

 

However you'd want to make sure that Akamai aren't pipelining multiple client requests in a single connection (And I think they will be from memory). Otherwise you'll be adding to the overhead by rejecting a connection seemingly at random (To them).

 

 

The best approach in this situation would be to give back an HTTP/404 result everytime rather than a reject. So the connection stays up for the next request.

 

 

H.