Forum Discussion
NimbostratusAPM ACCESS::acl eval and dynamic ACLs
Can someone please clarify what is the argument type for the "ACCESS::acl eval" command? Does it take:
- Userdefined ACLs
- Dynamic ACLs
Also, will it accapt F5 ACL syntax as used in definitions for dynamic ACLs? (E.g. {allow http any 1.2.3.4 *} etc.)
The use case behind this question is the ability to reload and evaluate complex dynamic ACLs per request in order to apply new ACLs mid session without forcing the user to start a new session.
The "ACCESS::acl eval" command is called through the ACCESS_ACL_ALLOWED and ACCESS_ACL_DENIED events for each request.
Thank you in advance.
1 Reply
Ilija_StankovskAfter a ticket with the F5 support team, it turned out that the "ACCESS::acl eval" can be used to re-evaluate static, user defined ACLs and not dynamic ACLs. Hopefully documentation will be updated in the iRule wiki to show that clearly.
Also a feature request was submitted to expand the scope of the "ACCESS::acl eval" command to also work with dynamic ACLs. Will it ever show up in a release? Time will tell.
