lb limits

The lb limits command creates the limit profiles that determine how much load a vService will carry at the same time. The profile carries the number of connections, the connection and session rate per second, the SSL limits and the buffer size. Its panel equivalent is the vService Limits screen.

Command Summary

TR7 WEB-CLI · lb limits

# Tab after the command

admin@TR7LBWAF01> lb limits

add delete list show update

 

admin@TR7LBWAF01> lb limits list # list all of them

admin@TR7LBWAF01> lb limits show <id> # show one

admin@TR7LBWAF01> lb limits add name <name> … # new profile

admin@TR7LBWAF01> lb limits update id <id> … # change

admin@TR7LBWAF01> lb limits delete <id> # delete

admin@TR7LBWAF01>  

Required Fields

Order	Field	Status	Value
1	name	Required	The name of the profile; it must be unique in the collection

The Limit Fields

All the fields are integers and, when they are not given, they are applied with their default values.

Field	What it does	What is written after it
--maxConn	Limits the total number of connections that the service will carry at the same time	A number between 0 and 1,000,000 (default 20000)
--maxConnRate	Limits the number of connections that will be accepted per second	A number (default 10000)
--rateLimitSessions	Limits the number of new connections that will be opened per second	A number (default 5000)
--maxSessRate	Limits the session rate per second	A number (default 10000)
--maxSslConn	Limits the total number of SSL connections that will be carried at the same time	A number (default 5000)
--maxSslRate	Limits the number of SSL connections that will be established per second	A number (default 2000)
--maxRetries	Limits how many times connecting to the backend will be retried	A number between 0 and 1000 (default 3)
--maxBufferSize	Determines the buffer size that the service will use	Between 16 and 262144 kB (default 128)

Zero does not mean unlimited

The smallest value of the fields is zero; writing zero in a limit does not release that resource. In order to loosen the limit, the value is increased.

Examples

TR7 WEB-CLI · the limit profile

admin@TR7LBWAF01> lb limits add name portal-limits \

--maxConn 50000 --maxConnRate 20000 --rateLimitSessions 8000 \

--maxSslConn 15000 --maxSslRate 4000 --maxBufferSize 256

 

admin@TR7LBWAF01> lb limits update id <id> --maxRetries 5

admin@TR7LBWAF01> lb service update id <vService> --poolLimits <profile>

admin@TR7LBWAF01> lb limits delete <id>

admin@TR7LBWAF01>  

Things to Know

• A profile does not work on its own. The limits are applied when the profile is bound to a vService with the --poolLimits field. This field is found in the vServices of the HTTP and TCP types.
• The SSL limits are independent of the total limit. Even if the --maxSslConn value is greater than the --maxConn value, the total connection limit is still valid.
• The buffer size affects the memory. When --maxBufferSize is increased, the service uses more memory; the resource limits should be evaluated together with the lb service record and the --qos fields in it.
• The name is unique. A second profile with the same name cannot be created.