Forum Discussion

BrianKiplagat's avatar
BrianKiplagat
Icon for Nimbostratus rankNimbostratus
Mar 18, 2020

F5 ASM Rate limit Requests based on Source IP

We have a situation where we would like to limit the number of requests form a particular IP to a web server seated behind ASM to 1 request per Source IP per second. Is this configuration option avai...
ASM Advanced WAF
BIG-IP
ddos
security
PeteWhite's avatar
PeteWhite
Icon for Employee rankEmployee
Mar 20, 2020

The short answer is no - you can do that fairly easily via iRules and the table ie add a table entry with a 1 second lifetime and if the client IP is present then deny access

pseudocode:

when HTTP_REQUEST

if table entry

drop/respond

else

add entry to table

endif

endwhen

 

Do you want to do this for ALL clients or just a specific one?