Forum Discussion

CraigD1_147916's avatar
CraigD1_147916
Icon for Cirrus rankCirrus
Jun 12, 2014

Connection Rate Limits - How does BigIP respond?

I have an application where I may need to employ the "Connection Rate Limit" feature on an 11.4 LTM. If I configure this on the virtual server for 1000 requests per second, what sort of response, if ...
application delivery
BIG-IP Access Policy Manager (APM)
LTM
management
performance
security
  • Kevin_Davies_40's avatar
    Kevin_Davies_40
    Jun 13, 2014

    It will send TCP reset for connection rate limited virtual servers when the limit is reached.

     

    See the bottom of SOL14813 - Detecting and Mitigating DOS/DDOS attacks (11.4.x/11.5.x)

     

    Connection limit on pool members is really for resource management. When you reach the limit it will not send any new connection requests to that server until it falls back below the threshold. It does not affect existing connections.

     

Kevin_Davies_40's avatar
Kevin_Davies_40
Icon for Nacreous rankNacreous
Jun 13, 2014

It will send TCP reset for connection rate limited virtual servers when the limit is reached.

 

See the bottom of SOL14813 - Detecting and Mitigating DOS/DDOS attacks (11.4.x/11.5.x)

 

Connection limit on pool members is really for resource management. When you reach the limit it will not send any new connection requests to that server until it falls back below the threshold. It does not affect existing connections.

 

  • NikhilB's avatar
    NikhilB
    Icon for Employee rankEmployee
    Jan 18, 2017

    The question was about connection "rate limiting" not connection limits. I don't believe TCP RST's are sent in the former.