For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Sakkarin_Westco's avatar
Sakkarin_Westco
Icon for Altostratus rankAltostratus
May 05, 2022

Irule for DDOs Attacks with LC

I have a Link controller module and I´m working with a client that is getting DD0s attacks from random IPs. Can irule stop it?
application delivery
Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
May 05, 2022

Hello,

 

When you say random ip addresses if they rotate too much then you may need bot protection like shape that can be integrated with F5 or with the backend server code with shape enterprise defense.

 

Still if during the attack if a single ip address is causing too much traffic even random one you can rate limit it. This will be good for HTTP VIP or HTTPS VIP where you do a decryption:

 

https://community.f5.com/t5/technical-forum/f5-irule-table-command-rate-limit-or-block-http-requests-in-two/m-p/295250#M258952

 

 

If the DDOS is volumetric at layer 3/4 better have scrubbing center beforethat like Silverline or your ISP can provide you such functions for extra payment.