Forum Discussion
Bubbagump_12531
Nimbostratus
NimbostratusDrop or send to pool based on source IP AND host address
I am trying to emulate the ability in Apache to accept or drop traffic to a particular vhost based on IP. So for instance, my Apache's vhost config says:
Order deny,allow
Deny from All...
hoolio
Cirrostratus
CirrostratusYep. Nice work in figuring it out.
Another thing to consider is requests with a host header that isn't myapp.somehost.com. It would be trivial for a user to set whatever host header they want with a hosts file entry pointing to the public IP address of your virtual server. Or they could just use the IP address. In that case, the requests wouldn't match your iRule logic and would go to the virtual server's default pool if one is defined.
To address this, you could either not check the host header or not have a default pool on the virtual server.
Aaron
