Mitigating Slow HTTP Post DDoS Attacks With iRules

The "after cancel" command in this iRule can trigger Bug ID454692, resulting in a connflow / tcl memory leak.

To work around this bug, you must unset the variable referencing the after object.

---snip---

       If all the POST data has been received, cancel the connection closure
      if { $static::post_debug } { log local0. "[IP::client_addr]:[TCP::client_port]: Canceling \$id: $id" }
      after cancel $id
      unset id
   }
}