Forum Discussion
NimbostratusRestrict TPS on a VIP which is SSL Enabled
We are using an F5 device to handle incomming connections from 500K endpoints which sends an status update every few minutes via SSL using HTTPS, When the Engg team pushes some changes to the endpoints they gradually end-up sending more TPS on the F5 device causing the F5 to spike on the CPU above 90% , Can i setup a Particular VIP to limit the number of TPS at a particular value and then the endpoints retry. Also can we setup Queue for a VIP.
Please share any information on the above.
4 Replies
- Kevin_Stewart
Employee
Request queuing is a function of pools, so not really applicable here:
One possible idea then is to implement connection rate limiting at the VIP itself:
arpydaysI had a similar situation with telemetry devices, not with F5 though but we didn't want all devices sending at once and saturating our links. So business rules were applied to the system to spread out events that caused bulk simultaneous connections. This could include offsetting the polling interval in the devices and/or spreading update pushes out so that only a certain number of devices were done at once.
Navin_130677Has anyone tried Connection Limits or Connection Rate Limit on a VIP ? Can you help to understand this better ?- Navin_130677Has anyone tried Connection Limits or Connection Rate Limit on a VIP ? Can you help to understand this better ?
