For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

RJ_171490's avatar
RJ_171490
Icon for Nimbostratus rankNimbostratus
Sep 03, 2018

Allow or Restrict access based on urls.

Hi All,   What's the best way to allow or restrict access to webserver based on the urls used by the user.   I want the connection to be allowed if the user uses the below urls and deny any ot...
application delivery
iRules
LTM
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Sep 03, 2018

Im thinking a switch would be easiest:

when HTTP_REQUEST {
    switch -glob [string tolower [HTTP::host][HTTP::uri]] {
        "11.11.103.139/uii/*" -
        "usd-msp10.inf.us.cvr.com/websso/*" {
            log local0. "[HTTP::host][HTTP::uri] allowed"
        }
        default {
            log local0. "[HTTP::host][HTTP::uri] blocked"
            reject (or drop, or HTTP redirect, or HTTP respond)
        }
    }
}

You could also do this with a CPM local traffic policy, which would probably be a little faster.