Forum Discussion

Micros_88999's avatar
Micros_88999
Icon for Nimbostratus rankNimbostratus
Oct 16, 2014
Solved

Allow access based on full url request

Hello,   I would like to make an iRule which drop connection when the remote hits a specific url.   I did the below iRule, which doesn't work because the HTTP:path doesn't contain the full requ...
application delivery
BIG-IP Access Policy Manager (APM)
devops
irules
LTM
security
  • R_Eastman_13667's avatar
    R_Eastman_13667
    Oct 16, 2014

    Try this:

    when HTTP_REQUEST {
    set url [HTTP::host][HTTP::uri]
    if{$url == "example.com/rest/nameservice"}
       TCP::close
}

when HTTP_RESPONSE {
    if{$url == "example.com/rest/nameservice"}
    HTTP::close
}
PeteWhite's avatar
PeteWhite
Icon for Employee rankEmployee
Oct 16, 2014
when HTTP_REQUEST { 
  log local0. "Access out if [IP::client_addr] : [HTTP::path]" 
  if { ( [ string tolower [HTTP::path]] equals "/rest/nameservice" ) } then 
  { 
    log local0. "Access allowed inside IF from [IP::client_addr]" 
    drop 
  } 
}

Use HTTP::host to get the host details. HTTP or HTTPS is based on the VS port.