iRule to Limit Connections from Source IP to Destination IP

Hi Chris,

It looks like you're limiting concurrent client connections. Do you have one destination IP to check? If so, you could add this check first in CLIENT_ACCEPTED:

when CLIENT_ACCEPTED {
   if { not [IP::addr [IP::local_addr] equals 1.1.1.1] }{
      return
   }
   ...

If you have more than one destination IP to check you could use a data group:

when CLIENT_ACCEPTED {
   if { not [class match [IP:local_addr] equals conn_limit_destinations_dg] }{
      return
   }
   ...

Either way, if you're not creating a subtable entry on every connection, you'd want to check if $key had been defined for that connection before trying to remove the key:

when CLIENT_CLOSED {
   if {[info exists key]}{
      table delete -subtable $tbl $key
   }
}

Aaron