Forum Discussion

EHost's avatar
EHost
Icon for Nimbostratus rankNimbostratus
Nov 15, 2019

iRULE for limiting user sessions

I'm looking to create an iRule that limits the amount of unique user sessions.

 

So far I have only been able to limit connections over all however, I'd like to allow say 500 users and as many connections as they want whilst their session is active.

 

I believe the best way to do this would be via a table, with some kind of user ID or session ID being tracked with a timeout.

 

If the timeout is met or the users session closed then they would be removed from the table.

 

Is this something that is possible?

 

Thanks

 

application delivery
BIG-IP
iRules
  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Nov 16, 2019

    this depends a lot on what you see as a session and what a big-ip can recognize as a session.

     

    can you share something about the type of traffic and if there is authentication involved or such?

     

    only LTM or ASM, APM also?

     

    • EHost's avatar
      EHost
      Icon for Nimbostratus rankNimbostratus
      Nov 18, 2019

      It would be LTM only.

       

      I was thinking of tracking users IP addresses, the traffic is http traffic that is then load balanced to some webservers.

       

      No authentication takes place on the F5s at all.