Waiting room
You can use Waiting Room to manage visitor traffic and avoid server overload delays, you can enable a virtual holding space and queuing system, allowing new users to enter a Waiting Room where they can view estimated wait times before accessing your application.
This feature may be configured for your entire website, or specific URL paths.
Here is an example of the message displayed to your users when they are queued to access your application.
To configure a Waiting Room policy:
- Go to Application Delivery > Waiting Room.
- Click Create New.
Configure these settings:
Please note, you are required to configure at least one of Total Active Users and New Users Per Minute. In addition, Path and Session Duration cannot be empty.
Name
Enter a name for the Waiting Room policy.
Path Type
Select whether to use a Simple String or a Regular Expression to specify the URLs for the Waiting Room. When users access the URL, FortiWeb will queue their requests according to the Waiting Room policy.
Path
The waiting room will only be enabled for the configured URL. Use /.* to match all.
If Path Type is Simple String, enter the literal URL.
If Path Type is Regular Expression, enter a regular expression to match the URLs.
This value cannot be empty.
Total Active Users
Control the size of traffic accessing your application.
If the number of active users reaches the configured value, additional users will enter the Waiting Room.
New Users per Minute
Prevent your application from being flooded by new users in a short time span.
If the number of new users per minute reaches the configured value, additional users will enter the Waiting Room.
At least specify one of Total Active Users and New Users per Minute.
If you choose to configure both, make sure that Total Active Users is set to a value greater than or equal to New Users Per Minute.
Session Duration
Users who have remained idle for the configured time will be considered as a new user.
Users who have ended and restarted the session will also be considered as a new user.
This value cannot be empty.
Description
Enter a brief description for the Waiting Room Policy.
Bypass Rules
Allow users with certain IP addresses to access your application directly, even if they trigger the above limiting conditions.
Click Create New and enter an IP address or range in the Value field to configure a new Bypass rule.
- Click OK.
- Click Create New to create a bypass rule to allow users from certain IP addresses to access your application directly, even if they trigger the above limiting conditions.
- Enter an IP address or range in the Source IPv4/IPv6/IP Range field.
- Click OK.
You can later on reference the Waiting Room policy in Web Protection Profile.