Irule for DDOs Attacks with LC

[Sakkarin_Westco]

I have a Link controller module and I´m working with a client that is getting DD0s attacks from random IPs. Can irule stop it?

[Nikoolayy1]

Hello,

When you say random ip addresses if they rotate too much then you may need bot protection like shape that can be integrated with F5 or with the backend server code with shape enterprise defense.

Still if during the attack if a single ip address is causing too much traffic even random one you can rate limit it. This will be good for HTTP VIP or HTTPS VIP where you do a decryption:

https://community.f5.com/t5/technical-forum/f5-irule-table-command-rate-limit-or-block-http-requests...

If the DDOS is volumetric at layer 3/4 better have scrubbing center beforethat like Silverline or your ISP can provide you such functions for extra payment.

[Sebastiansierra]

Hi,

If you don't have the F5 modules to protect against DDoS attacks as AFM and ASM you can follow this link:

https://support.f5.com/csp/article/K14813