For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Angel_Martinez_'s avatar
Angel_Martinez_
Icon for Nimbostratus rankNimbostratus
Nov 17, 2009

Persistence Flood

Hi     I would like if the BigIP LTM has any prevention system against a persistence table flood...     If we're playing with iRules adding persistence based on Set-Cookie I gu...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Nov 17, 2009
Hi Angel,

 

 

That's novel and could work. But then what happens if the attacker made a request with the JSID cookie in addition to the first request?

 

 

If you are concerned about such an attack, I think a better solution would be to use cookie insert persistence so that LTM doesn't have to track any sessions in its memory.

 

 

Aaron