Forum Discussion
Andre_1977
Nimbostratus
NimbostratusDistinguish between logged in users and visitors
Hi,
we have to protect a webserver farm from to many requests of vistors. This is needed to avoid GET/POST floods of unauthenticated users. So we want to forward visitors to a different farm.
Only if they are logged in they should be forwarded to the correct servers.
Do i assign them new cookies, or can i use existing cookies to distinguish that?
Can i do that without iRules?
Thank you a lot for your answers!
Andre
hoolioCirrostratus
Hi Andre,
You'd need to use an iRule (or possibly an HTTP class) to select a pool. The iRule would need to differentiate between a logged in user's request versus one that doesn't have a valid session with the application. Exactly how you would do that depends on how the application maintains its sessions. Ideally, you'd want to use something in the HTTP headers like URI, cookie, Authorization header, etc to determine when a user is logged in.
If you compare requests an authenticated user's request for a page with an unauthenticated user's request for the same page, what is different?
Aaron