For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kannan_Thalaia1's avatar
Kannan_Thalaia1
Icon for Cirrus rankCirrus
Sep 26, 2014

Need a iRule for VIP connection limit

The idea is:   We want to limit the access to the load balancer to X number of concurrent users After X concurrent users, the system will not accept anymore connections Users which were on the ...
application delivery
design
devops
iRules
LTM
Arnaud_Lemaire's avatar
Arnaud_Lemaire
Icon for Employee rankEmployee
Sep 27, 2014

two build in features could help, but it's not making sur current users are not impacted :

 

  • Connection limit: Specifies the maximum number of concurrent connections allowed for the virtual server. Setting this to 0 turns off connection limits. The default is 0.
  • Connection Rate Limit: Specifies the maximum number of connections-per-second allowed for a virtual server. When the number of number of connections-per-second reaches the limit for a given virtual server, the system redirects additional connection requests.

They are available per VS or per pool member.

 

If you want to go with an irule you can start from this one : https://devcentral.f5.com/wiki/iRules.virtual_server_connection_limit_with_HTTP_response.ashx.

 

You need then to add existing user concept by creating a table with either IP addresses or user's ID to bypass the logic.