Forum Discussion
Access restriction to a single virtual server for a specific IP address
Hi,
We have many virtual servers running behind our load balancer. I want to block a specific user (eg: 10.10.10.1) from accessing one virtual server alone. I find a lot of forums which explains how to reject a specific IP address. But that applies for all the virtual servers. I want that source IP to have access to all the other virtual servers behind the load balancer, excpet this one. Also, I want this virtual server to allow all other users except this one. Can anyone help me create an irule for this?
Thanks and Regards,
Geethanjali
5 Replies
- Mohamed_Lrhazi
Altocumulus
We have many virtual servers running behind our load balancer - What_Lies_Bene1
Cirrostratus
You could either use a packet filter specifying the one source IP and VS destination or an iRule such as this, which you would apply only to the VS in question;when CLIENT_ACCEPTED { if { [IP::addr [IP::client_addr] equals x.x.x.x] } { drop return } }
- Geethanjali_321
Nimbostratus
Thank you so much Lies Beneath and Mohamed. My question is how to apply it to just one VS? in the configuration utility, Main< Local Traffic< Virtual Servers. Click on the Virtual server, under the resources tab, we find iRules and should I go through the manage option? Or, Main< Local Traffic
Geethanjali
- Mohamed_Lrhazi
Altocumulus
It's not clear what exactly is confusing you here. - Geethanjali_321
Nimbostratus
Yes, My question is how to add it to one Virtual server. Because I just created the rule, by Main< Local Traffic< iRule and create option. I gave the name for the rule and the decription as
when CLIENT_ACCEPTED { if { [IP::addr [IP::client_addr] equals x.x.x.x] } { drop return } }
and It does not apply to the "xyz" Virtual server I want to apply it to. The iRule remains for the whole system.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com