Forum Discussion
Andre_1977
Nimbostratus
Oct 01, 2009Distinguish between logged in users and visitors
Hi,
we have to protect a webserver farm from to many requests of vistors. This is needed to avoid GET/POST floods of unauthenticated users. So we want to forward visitors to a different...
hoolio
Cirrostratus
Oct 01, 2009Hi Andre,
You'd need to use an iRule (or possibly an HTTP class) to select a pool. The iRule would need to differentiate between a logged in user's request versus one that doesn't have a valid session with the application. Exactly how you would do that depends on how the application maintains its sessions. Ideally, you'd want to use something in the HTTP headers like URI, cookie, Authorization header, etc to determine when a user is logged in.
If you compare requests an authenticated user's request for a page with an unauthenticated user's request for the same page, what is different?
Aaron
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects