Drop or send to pool based on source IP AND host address

Yep. Nice work in figuring it out.

 

 

Another thing to consider is requests with a host header that isn't myapp.somehost.com. It would be trivial for a user to set whatever host header they want with a hosts file entry pointing to the public IP address of your virtual server. Or they could just use the IP address. In that case, the requests wouldn't match your iRule logic and would go to the virtual server's default pool if one is defined.

 

 

To address this, you could either not check the host header or not have a default pool on the virtual server.

 

 

Aaron