For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Greg_Wood_33904's avatar
Greg_Wood_33904
Icon for Nimbostratus rankNimbostratus
Mar 30, 2010

How to limit the SSL TPS per VIP

We would like to assign a quota for the amount of SSL TPS each site can use so that one site does not take down all the others once the TPS limit has been reached (Client SSL only).     Of ...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Mar 31, 2010
Hi Greg,

 

 

I'm not aware of any simple ways to limit SSL TPS in 10.1. Did the salesperson give you any hints on what they were thinking of? If it was a native options for limiting SSL TPS per VIP, I'd think the option would need to be on a client SSL profile. I don't see anything like this in 10.1 though.

 

 

Maybe they were thinking of using the new table command? There are a few examples on the table wiki page as well as the iRule Codeshare for using the table command to limit TCP connections or HTTP requests to a VIP. Maybe you could adapt one of these?

 

 

table wiki page

 

http://devcentral.f5.com/wiki/default.aspx/iRules/table

 

 

HTTP Session Limit using the table command

 

http://devcentral.f5.com/wiki/default.aspx/iRules/HTTP_Session_Limit.html

 

 

Aaron