For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Navin_130677's avatar
Navin_130677
Icon for Nimbostratus rankNimbostratus
Oct 07, 2015

F5 Connection Rate Limit for VIP

Has anyone implemented Connection Rate Limit under the Virtual Servers -Advanced Configuration what do clients see after the particular rate limit is setup for a VIP.

 

9 Replies

  • Clients sending requests after the Connection Rate Limit has been exceeded will receive TCP packet in response where RST flag is set to 1. Or in other words, just "Connection Reset".

     

    Note that this applies to entirely new connection attempts (handshakes), any existing connections will not be interrupted in case of threshold breach.

     

    • Joe_Lupo_283884's avatar
      Joe_Lupo_283884
      Icon for Nimbostratus rankNimbostratus

      To piggy-back on this conversation. I need to know how to get a server back to "Available" once it has hit the rate limit. In one post I saw somewhere it was stated to set the Connection Rate Limit to "0" to get the Virtual Server back to "Available", but I want to keep a Connection Rate Limit on this VS, but get the VS back to "Available". Currently, no matter how high I set the Connection Rate Limit the VS goes back to "Unavailable (Enabled) - The virtual server's rate limit has been reached".

       

      Any insight??

       

    • Hannes_Rapp's avatar
      Hannes_Rapp
      Icon for Nimbostratus rankNimbostratus

      Hi,

       

      "Currently, no matter how high I set the Connection Rate Limit the VS goes back to "Unavailable (Enabled)"

       

      Before the limit is breached, the status should be Green or Blue (depending on if you use health-check monitors against pool members). Only after the limit is breached, it should switch to Yellow. Recommend to contact support with that, seems like unintended outcome.

       

  • Clients sending requests after the Connection Rate Limit has been exceeded will receive TCP packet in response where RST flag is set to 1. Or in other words, just "Connection Reset".

     

    Note that this applies to entirely new connection attempts (handshakes), any existing connections will not be interrupted in case of threshold breach.

     

    • Joe_Lupo_283884's avatar
      Joe_Lupo_283884
      Icon for Nimbostratus rankNimbostratus

      To piggy-back on this conversation. I need to know how to get a server back to "Available" once it has hit the rate limit. In one post I saw somewhere it was stated to set the Connection Rate Limit to "0" to get the Virtual Server back to "Available", but I want to keep a Connection Rate Limit on this VS, but get the VS back to "Available". Currently, no matter how high I set the Connection Rate Limit the VS goes back to "Unavailable (Enabled) - The virtual server's rate limit has been reached".

       

      Any insight??

       

    • Hannes_Rapp_162's avatar
      Hannes_Rapp_162
      Icon for Nacreous rankNacreous

      Hi,

       

      "Currently, no matter how high I set the Connection Rate Limit the VS goes back to "Unavailable (Enabled)"

       

      Before the limit is breached, the status should be Green or Blue (depending on if you use health-check monitors against pool members). Only after the limit is breached, it should switch to Yellow. Recommend to contact support with that, seems like unintended outcome.

       

  • Clients sending requests after the Connection Rate Limit has been exceeded will receive TCP packet in response where RST flag is set to 1. Or in other words, just "Connection Reset".

     

    This is not true. It still works for not limited clients, which is how it is supposed to work...

     

    • Hannes_Rapp's avatar
      Hannes_Rapp
      Icon for Nimbostratus rankNimbostratus

      I think the next sentence pretty much clarifies what you have elaborated.

       

    • nbnb_277285's avatar
      nbnb_277285
      Icon for Nimbostratus rankNimbostratus

      sorry i exprimed myself badly, i meant it will work for new clients.