Forum Discussion

wrightnz_34708's avatar
wrightnz_34708
Icon for Nimbostratus rankNimbostratus
Sep 03, 2010

Top talkers

Hi folks

 

 

Couldn't find an appropriate forum name to pose this question ... here goes anyway

 

 

Background:

 

We occasionally have rouge web crawlers generating large amounts of traffic and affecting the performance of our Big-IP 6400 HA pair .... robots.txt not taking care of some of these.

 

 

Questions:

 

1. Is there a way to determine 'Top Talkers' or IP addresses generating the most traffic on a Big-IP LTM?

 

2. Is there an irule which can drop these blaclisted IP's as they try to connect?

 

 

Suspect I may have to do this on the firewall but wanted to check first if possible to do from the Big-IP

 

 

Cheers!

 

 

application delivery
dev
devops
iRules
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Oct 07, 2010
    Hi,

     

     

    Sure, you could do this with an iRule on LTM. If you're on 10.x, you can use the table command to save this info in a session table. For 9.x, you can use a global array.

     

     

    You can check the iRule codeshare and table wik page for more info.

     

     

    Codeshare

     

    http://devcentral.f5.com/wiki/default.aspx/iRules/codeshare

     

    http://devcentral.f5.com/wiki/default.aspx/iRules/high_performance_rate_limiting.html

     

    http://devcentral.f5.com/wiki/default.aspx/iRules/Version_9_Throttle_on_Requests_Per_Second.html

     

     

    Table command info

     

    http://devcentral.f5.com/wiki/default.aspx/iRules/table

     

    http://devcentral.f5.com/Default.aspx?tabid=63&articleType=ArticleView&articleId=2375

     

     

    Aaron