Hi,

As to respond to my own post.. I have gotten the sc1_inc_gpc0 working when I define in my frontend:
stick-table type ip size 50k expire 120m store gpc0
tcp-request content track-sc1 src

But if I add to that tcp-request content track-sc1 src if METH_POST then it doesn't work anymore..

So this works:
frontend http-in
   bind *:80
   stick-table type ip size 50k expire 120m store gpc0
   tcp-request content track-sc1 src
   default_backend web29

backend web29
    stick-table type ip size 50k expire 120m store http_req_rate(120s)
    tcp-request content track-sc2  src if METH_POST
    stick store-request src            if METH_POST
    acl bruteforce_detection  sc2_http_req_rate gt 5
    acl foo sc1_inc_gpc0 gt 0
    http-request deny if foo bruteforce_detection
    server web29 x.x.x.x:80 check

This doesn't:
frontend http-in
   bind *:80
   stick-table type ip size 50k expire 120m store gpc0
   tcp-request content track-sc1 src if METH_POST
   default_backend web29

backend web29
    stick-table type ip size 50k expire 120m store http_req_rate(120s)
    tcp-request content track-sc2  src if METH_POST
    stick store-request src            if METH_POST
    acl bruteforce_detection  sc2_http_req_rate gt 5
    acl foo sc1_inc_gpc0 gt 0
    http-request deny if foo bruteforce_detection
    server web29 x.x.x.x:80 check

Thanks,
Toni Mattila


Reply via email to