For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Bill_S_'s avatar
Bill_S_
Icon for Nimbostratus rankNimbostratus
Dec 24, 2019

allowing a list of IP addresses access to a pool

I'm trying to find a way to pass the request through an address-list or ACL before sending to the pool. I want to allow only certain IP addresses to connect to this pool. Any ideas?   when HTTP...
iRules
security
Bill_S_'s avatar
Bill_S_
Icon for Nimbostratus rankNimbostratus
Dec 24, 2019

Thanks Surgeon! I had the IP:client_addr part, but couldn't figure how to reference a list. The link that referenced classes and datagroups did the trick.

neeeewbie's avatar
neeeewbie
Icon for MVP rankMVP
Dec 24, 2019

like below rule

 

when HTTP_REQUEST {

 

  switch [string tolower [HTTP::host]] && [class match [IP::client_addr] equals "accessip"] {

    "host.xyz.com" {

        pool pool-xyz

      }

    }

}