For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JB_106099's avatar
JB_106099
Icon for Nimbostratus rankNimbostratus
Apr 02, 2012

Conditional Irule

  I am new to irules and I need some assistance on writing an irule that will allow my local subnets to a uri that contains a specific string but will drop all external connections and also send...
application delivery
dev
devops
iRules
Michael_Yates's avatar
Michael_Yates
Icon for Nimbostratus rankNimbostratus
Apr 02, 2012
Hi JB,

What Sashi told you should work fine, but if you wanted to change the order of things you could save yourself a few cycles by not doing an IP Address compare and a Query inspection for every request.

You could search for the Query Value and if it matches then do the IP Address lookup. 

 v10.x.xwhen HTTP_REQUEST {
if { [HTTP::query] contains "arch" } {
if { !([class match [IP::client_addr] equals internal_subnets]) } {
HTTP::respond 403 content "Forbidden"
}
}
} v9.x.xwhen HTTP_REQUEST {if { [HTTP::query] contains "arch" } {if { !([matchclass [IP::client_addr] equals $::internal_subnets]) } {HTTP::respond 403 content "Forbidden"}}}

Just another option.

Hope this helps.