Forum Discussion
Yann_Desmarest_
Jul 27, 2016Nacreous
Hi,
this list can be uploaded as an ifile. You can also do a lookup using sideband connections in irules
- Yann_Desmarest_Jul 27, 2016Nacreous
You can create an ifile using the following command :
tmsh create sys file ifile blacklist source-path http://hostname.com/uri
and then update it using the following command :
tmsh modify sys file ifile blacklist source-path http://hostname.com/uri
The filesize for a single iFile was raised to 32Mb in 12.1.0. Prior versions limited the size to 4Mb.
- Yann_Desmarest_Jul 27, 2016Nacreous
Here a nice article on sideband connection that can help you design a lookup using HTTP API :
Advanced iRules: Sideband Connections
- Yann_Desmarest_Jul 27, 2016Nacreous
Here a small Proof of Concept.
when HTTP_REQUEST { set file [ifile get domains] log local0. "$file" set domain "amazon.co.uk.security-check.ga" if { [string match "*$domain*" $file] } { log local0. "succeeded" HTTP::respond 200 content "ok" } else { log local0. "failed" } }
Note : should test performance impact, memory consumption and stuff like that before switching something in production