For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MaxMedov's avatar
MaxMedov
Icon for Cirrostratus rankCirrostratus
Dec 06, 2023

Custom dynamic signature

Hello, We have a problem with a few clients that, from time to time, spamming us with specific parameter in the body.  For example, regular traffic is 10 TPS of parameter ABC, and sometimes those r...
security
MaxMedov's avatar
MaxMedov
Icon for Cirrostratus rankCirrostratus
Dec 07, 2023

Jeff_Granieri I've tried to reproduce it today but without success.
I send for about half hour from one client IP requests with this parameter - about 4TPS
and after that, spam with another client IP for about 30-40 TPS for another half hour with this parameter
BADoS has not recognized this as an anomaly; I'm not sure why...
From the documentation, it should detect anomalies of high volume unpredictable traffic and generate a signature tor other mitigations (depending on the conditions)