For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Bruno_Esteves_2's avatar
Bruno_Esteves_2
Icon for Nimbostratus rankNimbostratus
Apr 13, 2017

iRule - Sliding window

Dears, I'm trying to include a sliding window of time to counting requests. (e.g. if I have 8 req in 60 sec, block for 600 sec.) So, I did change ($static::timeout $static::timeout) to ($static::...
ASM Advanced WAF
iRules
security
Kevin_Davies_40's avatar
Kevin_Davies_40
Icon for Nacreous rankNacreous
Apr 14, 2017

Try the following..

when HTTP_REQUEST {
   create a unique entry for each request that will expire in 60 seconds
  table set -subtable "[IP::client_addr]:[HTTP::uri]" [TMM::cmp_unit][clock clicks] 0 60

  if {[table keys -subtable "[IP::client_addr]:[HTTP::uri]" -count] > 8} {
    log -noname local0. "REQUEST Rejected: current request  for $client_IP_addr"
    reject
  }
}