Technical Tip: How to rate limit source IP access to application URL within specified time

Requirement:
Period block source IP exceeds the rate limit within a specified time.

Configuration:

1. Go to Advanced Applications -> Custom Rule and select Create Rule.
2. Define the rule name and its operation (action).
3. Select Add Filter to define the match conditions.

Source IP: '<IP-range>'.
URL: '/sample-URL'.
Occurrence: 10 times in 1 minute.

Expected result:
If there was a violation (11th request) within 1 minute, block the source IP for 60 seconds.

To verify the functionality of the custom rule, navigate to Threat Analytics -> Attack Logs and check for logs related to the custom rule name.

For more information, refer to the following document:

Custom Rule