PREVENT THE SAME USER

is this applicable?

 

 

iRule::ology; Connection Limiting Take 2 by Colin

 

https://devcentral.f5.com/Tutorials/TechTips/tabid/63/articleType/ArticleView/articleId/1086427/iRuleology-Connection-Limiting-Take-2.aspx

Hi Nitass,

 

 

Thank you for your quick reply.However,a restriction isn't wanted on the virtual server. let me be clear , If a client logged on to back end server and it's connection is still going on, within the same time, client won't be able to connect to same or different server again. is that possible for you?

 

 

please help me about the matter.

 

 

Thank you in advance

 

Hi can,

 

 

iRules are event driven and applied to a Virtual Server(s).

 

 

If you want to limit a client to one server then it must be done so within the scope of a Virtual Server or multiple Virtual Servers.

 

 

If the target server(s) are on a VLAN owned by the BIG-IP then you should still have a Forwarder Virtual Server to apply an iRule to and you could still use the methodology pointed out by Nitass.

 

 

Hope this helps.

Hi Michael,

 

 

I guess I have explained you wrong the existing needing. As you mentioned in your response, as a matter of course we have to do this on the virtual server.However, We do not want to apply any rate limiting on the virtual server in total. we just want that If a client logged on to server over the virtual server and its session still is active on the virtual server ,it will never be able to make second connection without disconnecting.

 

 

Please help me about this matter

 

 

thank you in advance.

we just want that If a client logged on to server over the virtual server and its session still is active on the virtual server ,it will never be able to make second connection without disconnecting. have you tried irule in the article? i still think it is applicable for your case.

 

 

in this line, you may change from 1000 to 2 in case if you want to have only 1 connection per client address.

 

 

if { [table keys -subtable $tbl -count] > 1000 } {