source tracking limit connections per source-IP later extended sticky-address for redirections pass in proto tcp to $server port 80 \ keep state(max 100, source-track rule, \ max-src-nodes 75, max-src-states 3, \ max-src-conn-rate 10/30) pass in proto tcp to $server2 port 80 \ rdr-to $server3 sticky-address