[mistwang]

For LB, all the requests are dynamic as it needs to forward the request to backend server.

You need to set "Connection Soft Limit" "Connection Hard Limit" to block aggressive IP .