View RSS Feed


Identifying Load Balancers - How to tell if the target host is behind a load balancer

Rating: 2 votes, 2.00 average.
Credits to Joe McCray and his Defcon 18 talk

1. Use dig command
Look for multiple addresses resolving to one domain name.

2. Sites like can be used to check for a ip details. If things like F5 BigIP appear, most probably the host is load balanced.

3. Firefox Live HTTP Headers Add-on can be used to notice change in response headers. Make some generic request twice and notice change in response header. Things like IIS Server 6.0 in 1st response and IIS Server 7.0 in 2nd response indicates it is load balanced.

Also, Look for modifications such as :
BIGipServerOS in cookie
nnCoection : close
Cneonction : close

4. A shell script that detects load balancer
:: ::

5. A python script that detects load balancer



Total Trackbacks 0
Trackback URL: