Manual Chapter :
Managing Eviction Policies
Applies To:
Show Versions
BIG-IQ Centralized Management
- 5.4.0
Eviction policy overview
An eviction policy provides the BIG-IP® device with guidelines for how
aggressively it discards flows from the flow table. You can customize the eviction policy to
prevent flow table attacks, where a large number of slow flows are used to negatively impact
system resources. You can also set the way that the system responds to such flow problems in
an eviction policy, and attach such eviction policies globally, to route domains, and to
virtual servers, to protect the system, applications, and network segments with a high level
of customization.
Note: For more
information on how BIG-IP devices use eviction policies, refer to the BIG-IP system
reference information on support.f5.com. From the BIG-IP Knowledge
Center, select the BIG-IP AFM module and the software version you have installed; then
select the appropriate guide. For example, information about the eviction policy parameters
for BIG-IP version 13.0 is provided in the BIG-IP Network Firewall: Policies and Implementations,
Version 13.0 guide in the Preventing Attacks with Eviction Policies and
Connection Limits chapter.
Create a new eviction policy
You can create a new eviction policy that provides guidelines to determine how aggressively your BIG-IP® devices discard flows from the flow table.
Manage eviction policies and general settings
You can use the BIG-IQ® to manage the settings for an existing policy and apply eviction policies to any managed device. Eviction policies establish guidelines for how aggressively a BIG-IP® device discards flows from the flow table.
