Forum Discussion
Sec-F5
Nimbostratus
NimbostratusDOS Profil Questions
Hi everyone, I want to protect the company transactional website from L7 DoS/DDoS attacks using the DOS profile. Users access to the website via web browsers and mobile applications. In order to a...
Hey Sec-F5,
I saw you already got an answer. But I would like to mention the configuration I usually use to mitigate L7 HTTP/s DoS attacks.
My typical recomendation is to use BaDoS only. -Don´t use it together with TPS or stress-based!
From the screenshot you can take the config. BaDoS is a layered DoS protection, which means it has multiple options mitigation, but it does only kick in, when your server is under stress!
To get the details on traffic, stress, mitigation, ... etc you can go to the BaDoS dashboard. You find this in the drop-down menu of the BIG-IP dashboard.
I hope that helps!?
Cheers, sVen
