What is Quarantine Action and How to Use It?
About
What is Quarantine Action and How to Use It?
With the Quarantine Action, various information can be monitored (such as IP and User Agent or V-Host and IP) to create quarantine conditions. In the event of exceeding the Rate Limiting thresholds, different actions can be taken, such as blocking, redirecting, or displaying content to clients. During the specified quarantine period, access to the Backend Service is restricted based on the chosen action. This action can be configured specifically for one path or a specific client IP address.
Interface
Quarantine Action
Step > 1
First, to define the Quarantine action, follow these steps: "Traffic Manager > Traffic Manipulation > Actions > Add." In the opened screen, select "Quarantine" as the Action Type. Under the "Tracking Key" tab, select IP and User Agent for this example, and set the tracking duration to 10 minutes. This way, each client will be tracked based on the selected information in 10-minute intervals. As quarantine conditions, various situations can be monitored, including HTTP Requests, HTTP Errors, Incoming Data, Outgoing Data, Total Connections, and Current Connections. By selecting HTTP Request, clients sending more than 10 requests will be put into quarantine. Set the quarantine duration and choose what action will be taken against clients who exceed the quarantine condition. For example, create a new content page.
Step > 2
Under the "Conditions" tab, select the circumstances under which the quarantine will be activated. If no specific information is selected, it will always be active. For instance, create a path for /login.php. Click the "Add" button to create the Quarantine action.
Step > 3
"vServices > Related vService" is selected and the editing screen opens. From the Details tab, Actions is activated and the created Action is selected.
The changes made for the vService are saved by clicking the Save button.
Control
Browser
Using a browser, continuously send requests to the /admin path of the relevant vService to exceed the rate limit, and observe that no content page is returned. When requests are made to the /login.php path that exceed the rate limit, the content page appears, indicating that the quarantine action has been activated.
To verify via the TR7 web management interface, follow the steps: "Monitor Mode > Relevant vService > Log."
In the opened screen, you can check the information of clients that are being monitored and quarantined. You can also perform actions such as monitoring the IP addresses in quarantine and releasing them.