Forum Discussion

ocnsinc_68625's avatar
ocnsinc_68625
Icon for Nimbostratus rankNimbostratus
May 10, 2012

Connection Limit iRule not rejecting concurrent sessions as expected

Hi --     The below iRule was enabled on a specific V/S to reject more than one session for a given unique source IPADDR. After enabling the iRule, rejection notifications are logged in the "ltm...
application delivery
dev
devops
iRules
spark_86682's avatar
spark_86682
Historic F5 Account
May 11, 2012
The only way to access a sort of global data store on 10.0.x is the session command. However, it can't provide a 100% perfect solution, since it doesn't really provide any good concurrency tools for you (which is why we wrote the table command). You'd have to do something like: 


if { [session lookup uie $ipaddr] != 1} {
   session add uie $ipaddr 1
} else {
   reject
}

But multiple connections could still come in at the exact same time and get through. That's probably the best you can do without upgrading (which you really should do; 10.0 is over 3 years old).