For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jtostado_47719's avatar
jtostado_47719
Icon for Nimbostratus rankNimbostratus
Oct 21, 2009

BIGIP 4.5 to 9.3.1 iRule Conversion

I need help converting this rule:     if (http_uri ends_with one of portal_redirect_class) {   redirect to "https://psp-portal.com/portal/server.pt"}   else {   use pool SHAR...
dev
devops
iControl
v9
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Mar 29, 2010
Hi Sumod,

 

 

You can use matchclass to check whether a client IP is part of an address type datagroup. And you can also use matchclass to see if the requested URI is part of a string datagroup. [IP::client_addr] replaces ${client_addr}. You don't need to use "use pool" in 9/10.x; just "pool POOL_239_2" works. Also, you can combine client IP addresses that you want to send to the same pool in an address datagroup to reduce the number of IP checks you do. If you do want to check a single IP address or network, you can use the IP::addr command.

 

 

Here are a few links:

 

 

http://devcentral.f5.com/wiki/default.aspx/iRules/ip__addr

 

http://devcentral.f5.com/wiki/default.aspx/iRules/ip__client_addr

 

http://devcentral.f5.com/wiki/default.aspx/iRules/matchclass

 

http://devcentral.f5.com/wiki/default.aspx/iRules/pool

 

http://devcentral.f5.com/wiki/default.aspx/iRules/http__method

 

http://devcentral.f5.com/wiki/default.aspx/iRules/log

 

 

Aaron