For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

RockBD's avatar
RockBD
Icon for Altocumulus rankAltocumulus
May 03, 2021

How to block source IP (which is hidden in pvt ip) in F5 Big-IP.

Dear All   I am not good in networking terms so please forgive if i am wrong.   I am a application owner. Last couple of days my application got DDoS attack (as per my network team). But the ...
application delivery
BIG-IP
LTM
security
RockBD's avatar
RockBD
Icon for Altocumulus rankAltocumulus
May 04, 2021

can you please guide me how to block DDoS attack on Big-IP? I don't know which article will be more appopriate for blocking DDoS. Is the following is the possible way to protect DDoS in F5 big-IP

https://techdocs.f5.com/en-us/bigip-14-1-0/big-ip-asm-implementations-14-1-0/preventing-dos-attacks-on-applications.html

Daniel_Wolf's avatar
Daniel_Wolf
Icon for MVP rankMVP
May 04, 2021

Look, there is not a one size fits all solution for DDoS. It much depends on the BIG-IP device you have, the TMOS version you run, the license you own and the kind of attack you see.

From the link you have shared, I would configure Behavioral & Stress-based Detection only. Do not combine Behavioral & Stress-based Detection with TPS-based detection.

Additionally I would add a Bot Defense Profile. https://techdocs.f5.com/en-us/bigip-14-1-0/big-ip-asm-implementations-14-1-0/configuring-bot-defense.html