Rate limiting based on X-forwarded-For

Forums Technical Forums
,
1

Hello,

Currently  our external BIG-IP receive traffic from CloudFlare.

I would like to apply a rate limit on the IP provided by  X-FORWARDED-FOR header.

Aside from building an iRule, is there any bulit-in option inside of F5 modules to achieve this?

the use case is to rate limit for OTP submission and im scared that an iRule will have high load on the resources.

Thanks in advance.

2

Hi @ameenovv ,

you could use the DoS Protection Feature of the the AWAF and implement TPS-based DoS Detection. 
K36452759: Using X-Forwarded-For as Source IP for Bot Defense and Application DoS Profiles
MyF5 - Preventing DoS Attacks on Applications

Cheers
Daniel

3

Hi @TheWolf

Thanks for the insight, but DoS does not have rate limiting feature that can help in my case.

What i need is for example to rate limit an IP from submitting OTP for 15 min. as an example