Forum Discussion

goldenears_3288's avatar
goldenears_3288
Icon for Nimbostratus rankNimbostratus
Feb 16, 2018

Unexpected traffic on F5 unable to block

We are currently receiving over 1 million active connections through our F5 from an unknown source and are trying to create an iRule or similar to block. Usually, we have 19 connections.   F5 Vers...
devops
iRules
Only1masterbla1's avatar
Only1masterbla1
Icon for Cirrus rankCirrus
Feb 19, 2018

You may use iRule like this:

 

when CLIENT_ACCEPTED { if { [IP::addr [IP::client_addr] equals 10.10.10.10] } { drop log local0. "connection dropped from [IP::client_addr]" } }

 

All address definitions are here for your reference: https://devcentral.f5.com/wiki/iRules.IP.ashx