For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

BrianKiplagat's avatar
BrianKiplagat
Icon for Nimbostratus rankNimbostratus
Mar 18, 2020

F5 ASM Rate limit Requests based on Source IP

We have a situation where we would like to limit the number of requests form a particular IP to a web server seated behind ASM to 1 request per Source IP per second. Is this configuration option available via ASM configuration?

1 Reply

  • The short answer is no - you can do that fairly easily via iRules and the table ie add a table entry with a 1 second lifetime and if the client IP is present then deny access

    pseudocode:

    when HTTP_REQUEST

    if table entry

    drop/respond

    else

    add entry to table

    endif

    endwhen

     

    Do you want to do this for ALL clients or just a specific one?