For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kanokwut_thanad's avatar
kanokwut_thanad
Icon for Nimbostratus rankNimbostratus
Mar 08, 2005

Concurrent connection limit

Hi,     We are using Big-IP 6400 in our network for managing of 30-40k concurrent connections with 4-5 comprehensive rules.     Now, I would like to limit concurrent connections ...
application delivery
dev
devops
iRules
hirox_127495's avatar
hirox_127495
Historic F5 Account
Mar 24, 2005
This code will work on 9.0.4...

 

 

when RULE_INIT {    
   array set ::active_clients { } 
   log local0. "phase1"  
 }    
 when CLIENT_ACCEPTED {    
   set client_ip [IP::remote_addr]    
   if { [info exists ::active_clients($client_ip)] } { 
     if  {$::active_clients($client_ip) > 10 } { 
       log "Client $client_ip has too many connections"    
       reject    
       return    
     } else { 
       log local0. "$::active_clients($client_ip)" 
       incr  ::active_clients($client_ip) 
     } 
   } else { 
     set ::active_clients($client_ip) 1 
   } 
 }    
 when CLIENT_CLOSED {    
   if { [info exists ::active_clients($client_ip)] } {    
     incr ::active_clients($client_ip) -1    
     if { $::active_clients($client_ip) <= 0 } {    
       unset ::active_clients($client_ip)    
     }    
   }    
 }