Forum Discussion
AJ_2609
Nimbostratus
Jan 06, 2012Using iRule to limit POST/GET vars to prevent Hashtable collisions
Does anyone know how it would be possible to limit the number of post and get vars via an iRule so as to prevent some type of hash table collision dos? Say setting the number of vars to 500,...
hoolio
Cirrostratus
Jan 06, 2012Hi AJ,
Sure, here's an example iRule which should do this:
http://devcentral.f5.com/Community/GroupDetails/tabid/1082223/aff/5/afv/topic/aft/2159136/afc/2235372/Default.aspx
I'm not sure that you could exploit this vulnerability using the query string. But if you wanted to check the overall query string length, you could use [string length [HTTP::query]].
Aaron
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects