Forum Discussion

Eric_Zimmerman_'s avatar
Eric_Zimmerman_
Icon for Nimbostratus rankNimbostratus
Jan 31, 2006

Dynamic

newbie question...

 

 

I want to be able to control the rate of requests by source IP address in version 4.x.

 

 

The basic functionality that I am looking for is:

 

 

1. Determine which clients are requesting a specific resource at too great of a rate (at runtime).

 

2. Build a list of these clients (also at runtime).

 

3. Use this list to either:

 

- Redirect to a static URL that displays a resource overuse warning message.

 

- Move the request to a common pool that limits the rate of the requests, like a low_priority_pool

 

 

This leads me to a couple of questions:

 

- My basic understanding of 4.x and iRules is that items 1 and 2 are probably not achievable using iRules or 4.x out-of-the-box functionality. Is that correct?

 

- For item 3, let's assume that I have an external application that can build a list of "black-listed" IP addresses, and provide this list to Big IP in a text file. Can an iRule dynamically look up the black list IPs from the text file and perform logic?

 

- Is there an easier way to accomplish 1, 2, and 3 using 4.x functionality?

 

 

Thanks in advance.
  • Colin_Walker_12's avatar
    Colin_Walker_12
    Historic F5 Account
    Here's a great post by mmac that answers some of these questions: Click here

     

     

    Take a look, and post again if you've still got questions you're looking to get answered.

     

     

    -Colin