tux143
Oct 29, 2019Cirrus
iRules performance measuring
I wrote following iRules to stop DDoS from various User-Agent: because my app has specific User-Agent string which is "My_Client" which i only care, so i wrote rule to tell drop everything which doesn't contain "My_Client"
when HTTP_REQUEST {
if { not ( [HTTP::header "User-Agent"] contains "My_Client" ) } {
drop
}
}
Now when i am look at status i am seeing following but i have no idea what i should consider from following output, what is CPU cycle and how do i measure that its hammering my CPU or not, overall CPU usage is around 30% on dashboard.
[root@F5-ab:Active:In Sync] config # tmsh show ltm rule User_Agent_Filter
--------------------------------------------------
Ltm::Rule Event: User_Agent_Filter:HTTP_REQUEST
--------------------------------------------------
Priority 500
Executions
Total 3.2M
Failures 0
Aborts 0
CPU Cycles on Executing
Average 22.1K
Maximum 440.6K
Minimum 5.9K
Can you help me to understand above output.