Forum Discussion

AJ_2609's avatar
Icon for Nimbostratus rankNimbostratus
Jan 06, 2012

Using iRule to limit POST/GET vars to prevent Hashtable collisions

Does anyone know how it would be possible to limit the number of post and get vars via an iRule so as to prevent some type of hash table collision dos?



Say setting the number of vars to 500, anything else will get logged and dropped?








1 Reply

  • Hi AJ,



    Sure, here's an example iRule which should do this:





    I'm not sure that you could exploit this vulnerability using the query string. But if you wanted to check the overall query string length, you could use [string length [HTTP::query]].