Rejecting a connection based on address and time of day?

Hi Joe,

 

 

That might have been bad advice actually. It looks like there isn't a supported way to remove individual connection table entries from the connection table via iControl right now. You can check this post for details:

 

 

System::Connections seems to be gone from the SDK

 

http://devcentral.f5.com/Default.aspx?tabid=53&view=topic&postid=86013&forumid=1&tpage=186023

 

 

You could potentially use 'b conn' to look up and delete a connection from the LTM command line. However, there is a limit of ~7000 entries that 'b conn' will output:

 

 

SOL6573 - The bigpipe conn command displays a maximum of 7037 connections

 

https://support.f5.com/kb/en-us/solutions/public/6000/500/sol6573.html

 

 

You might consider opening a case with F5 Support and ask them for a recommendation on how to do this. If they can't come up with anything foolproof, it would make for a good 'request for enhancement'.

 

 

Aaron