Forum Discussion

lorenze's avatar
lorenze
Icon for Altocumulus rankAltocumulus
Aug 11, 2020

Drop Traffic in F5

Hi,

 

So we have this multiple cnames for our website and was wondering if its possible in f5 to drop traffic if its not equal to our www.site.com . So basically, we wanted to drop any traffic that is being access through cname like cname.site.com or cname2.site.com and just dont let them connect. Can this be done on irule?

 

 

Thanks!

BIG-IP
iRules
security
  • Enes_Afsin_Al's avatar
    Enes_Afsin_Al
    Icon for MVP rankMVP
    Aug 11, 2020

    Hi lorenze,

    when HTTP_REQUEST {
	if {[string tolower [HTTP::host]] ne "www.site.com"} {
		drop
	}
}
    • lorenze's avatar
      lorenze
      Icon for Altocumulus rankAltocumulus
      Aug 11, 2020

       ,

       

      Thanks or the quick response. Will this make the page load for a couple of seconds and times out or just times out right away when accessed.

       

  • lorenze's avatar
    lorenze
    Icon for Altocumulus rankAltocumulus
    Aug 11, 2020

     

    also, how do I add another site to allow on this irule. This works by the way. Thank you!

    • Enes_Afsin_Al's avatar
      Enes_Afsin_Al
      Icon for MVP rankMVP
      Aug 12, 2020
      when HTTP_REQUEST {
	if { !([string tolower [HTTP::host]] equals "www.site.com" || [string tolower [HTTP::host]] equals "www.site2.com" || [string tolower [HTTP::host]] equals "www.site3.com") } {
		drop
	}
}

      or 

      when HTTP_REQUEST {
	switch [string tolower [HTTP::host]] {
		"www.site.com" -
		"www.site2.com" -
		"www.site3.com" { }
		default { drop }
	}
}