Forum Discussion
Scott_Larson
Nimbostratus
NimbostratusBlock until NAME::lookup returns?
For my iRule, I need to perform a reverse DNS lookup, and determine if a client IP is from a domain ending in .mil or .gov. This determines whether or not they need to authenticate. The authenticati...
Actually, this version works better:
when CLIENT_ACCEPTED {
set clientIP [IP::client_addr]
set resolved 0
TCP::collect
NAME::lookup $clientIP
}
when NAME_RESOLVED {
set client_name "[NAME::response]"
set resolved 1
TCP::release
}
when CLIENT_DATA {
if { $resolved == 0 } {
TCP::collect
} else {
TCP::release
}
}It solves a sort-of race condition between getting data and the name resolving.
