Forum Discussion
Herman2024
Cirrus
CirrusWhat does "EPS" in ddos threshold setting stands for?
Hi, can someone please help advise what "EPS" in ASM ddos threshold setting stands for? what is the full name of "EPS" ? thanks in advance!
Hi Herman2024 ,
Adding to the other replays , yes it's the event per Second.
in more details >> It's the event for each vector for example "TCP RST" Vector so EPS here means how many TCP RSTs do you want BIGIP to trigger violation detected or mitigated if traffic reaches to it... i.e "The limit number for TCP RST"
Measure this on each Vector.
Herman2024Thanks Aswin_mk , @John, @F5 Design Engineer, @ Mohamed_Ahmed_Kansoh for your kind advices!
Hi Herman2024 ,
Adding to the other replays , yes it's the event per Second.
in more details >> It's the event for each vector for example "TCP RST" Vector so EPS here means how many TCP RSTs do you want BIGIP to trigger violation detected or mitigated if traffic reaches to it... i.e "The limit number for TCP RST"
Measure this on each Vector.Hi Herman,
As said above EPS is Events per seconds.
You can refer this community article for great details on EPS and other settings:
Explanation of F5 DDoS threshold modes | DevCentral
Best Regards
F5 Design Engineer
john589daneNimbostratus
Hello,
In ASM (Application Security Manager) DDoS threshold settings, "EPS" stands for Events Per Second.
Best Regards,
John Dane- Aswin_mk
Cumulonimbus
Hi Herman2024
In ASM DDoS threshold settings, EPS stands for Events Per Second. It's a measurement of how many packets are received per second.
BR
Aswin
