limit client connection

Hi Colin,

I have tested the following irule and it can sucessfully to check the number of connections. However, it cannot reject the connections more than 5.

I opened a few browsers to access BIG-IP vip, i see the log show "Client $client_ip has too many connections" after the connection greater than 5. But, when I open additional browser to access the vip, it still can access the server. Based on my understand, the rule should block the sixth connection from same ip address. Is it true? Thanks!

when RULE_INIT {    
   array set ::active_clients { } 
   log local0. "phase1"  
 }    
 when CLIENT_ACCEPTED {    
   set client_ip [IP::remote_addr]    
   if { [info exists ::active_clients($client_ip)] } { 
     if  {$::active_clients($client_ip) > 5 } { 
       log "Client $client_ip has too many connections"    
       reject    
       return    
     } else { 
       log local0. "$::active_clients($client_ip)" 
       incr  ::active_clients($client_ip) 
     } 
   } else { 
     set ::active_clients($client_ip) 1 
   } 
 }    
 when CLIENT_CLOSED {    
   if { [info exists ::active_clients($client_ip)] } {    
     incr ::active_clients($client_ip) -1    
     if { $::active_clients($client_ip) <= 0 } {    
       unset ::active_clients($client_ip)    
     }    
   }    
 }