Configuring Http Trl; Configuring Http Trl Client - Brocade Communications Systems ServerIron ADX 12.4.00a Security Manual

1

Configuring HTTP TRL

•
•
•
•
Configuring HTTP TRL
This section describes how to configure the HTTP TRL feature.
NOTE
For traffic going through a VIP, Brocade recommends that you apply the TRL policy to the VIP and
Interface.

Configuring HTTP TRL client

Use the following procedures to configure the HTTP TRL client rate limit and the client maximum
connection.
Configuring HTTP TRL client rate limit
To configure the HTTP TRL client rate limit, follow these steps.
1. Define an HTTP TRL policy.
2. Configure an HTTP TRL client rate limit.
3. Configure the action to take if a client exceeds the configured rate limit (optional).
Configuring HTTP TRL client maximum connection
To configure HTTP TRL client maximum connection, follow these steps.
1. Define an HTTP TRL policy.
18
Rate-limiting functionality must support rate over time and total connections, based on
customer ID.
Max-conn currently works only for HTTP1.0.
This feature supports http redirect, or drop client response actions once rate-limit has been
exceeded.
This feature provides event and threshold alert monitoring and notification, based on specific
customer connection SLAs.
ServerIronADX(config)# http-trl-policy p1
Syntax: [no] http-trl-policy <policy-name>
ServerIronADX(config-http-trl-p1)# client-name c1 monitor-interval 1 10 20 0
Syntax: [no] client-name <client-name> monitor-interval <interval-value> <warning-rate>
<shutdown-rate> <holddown-interval>
For more detailed command information, refer to
monitor-interval" on page 27.
ServerIronADX(config-http-trl-p1)# client-name c1 exceed-action reset
Syntax: [no] client-name <client-name> exceed-action reset
ServerIronADX(config)# http-trl-policy p1
"Client-name <client-name>
ServerIron ADX Security Guide
53-1002440-03