Forum Discussion

Nimbostratus

Sep 05, 2014

Limiting HTTP/HTTPS GET and POST Flood Attacks using an iRule

Hey folks, I am interested in seeing if there is an existing iRule that can rate limit HTTP/HTTPS GET/POST Flood Attacks. I have search DevCentral and found a few similar but many look as though...

nitass_89166
Sep 06, 2014
In my specific instance, I want to limit based on source IP. If the source goes over the specific POST/GET limit within a specified time frame, they then are dropped automatically for a specified period of time.

are these applicable?

v10.1 - The table Command - Examples by spark (Limiting POST Requests Per User)

https://devcentral.f5.com/articles/v101-the-table-command-examples

Limit the number of HTTP requests by a client within a specified time by Bhanu

https://devcentral.f5.com/wiki/iRules.Limit-the-number-of-HTTP-requests-by-a-client-within-a-specified-time.ashx

nitass

Employee

In my specific instance, I want to limit based on source IP. If the source goes over the specific POST/GET limit within a specified time frame, they then are dropped automatically for a specified period of time.

are these applicable?

v10.1 - The table Command - Examples by spark (Limiting POST Requests Per User)

https://devcentral.f5.com/articles/v101-the-table-command-examples

Limit the number of HTTP requests by a client within a specified time by Bhanu

https://devcentral.f5.com/wiki/iRules.Limit-the-number-of-HTTP-requests-by-a-client-within-a-specified-time.ashx