For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

pds_71160's avatar
pds_71160
Icon for Nimbostratus rankNimbostratus
Oct 10, 2011

http throttle BEFORE reverse proxy/ NAT?

Would an http throttle iRule have priority (be executed before) reverse proxy or NAT configuration?     thanks!      
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Oct 11, 2011
I think PDS is asking if the throttling could be done before TMM translates the client IP to its own source IP. If that's the question, yes, you can throttle based on the original client IP. If you're throttling based on layer 4 connections you can use [IP::client_addr] to get the client IP in the CLIENT_ACCEPTED event. For HTTP request based throttling, you can throttle in the HTTP_REQUEST event.

 

 

http://devcentral.f5.com/wiki/iRules.client_accepted.ashx

 

http://devcentral.f5.com/wiki/iRules.http_request.ashx

 

http://devcentral.f5.com/wiki/iRules.ip__client_addr.ashx

 

 

Aaron