TCP Client Port Segmentation Filtering

When traffic is served from a single virtual web IP (VIP) address, you can use the TCP client port segmentation method to segment the traffic based on TCP client port ranges.

Note: Wherever possible, IP address segmentation is the preferred method over port segmentation. See Web Server Host IP/Port Addresses Filtering.

Since there are not multiple web server host IP addresses to distribute, the segmentation is done by TCP client port ranges. Each DNCA instance filters on a range of client TCP ports. The aggregate of all port ranges across all DNCA instances spans the entire spectrum of client TCP ports and thus ensures complete capture.

The following are the requirements to use this method:

  • The virtual IP address (VIP) traffic must contain reqiured capture traffic only. All traffic on this VIP is used.
    Note: Verify that the VIP does not have any undesired traffic. Only one VIP can be specified for this type of filtering.
  • Web servers host TCP port numbers must be less than 1024. For example, host ports 8443, 4443, and 1443 are not valid.
  • Ignored filter rules cannot be used.
  • For more information about creating filter rules for this method of traffic segmentation, see Filter rules for a port range.
  • For more information about custom filter support, contact Discover Technical Support.