For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

SteveD1979's avatar
SteveD1979
Icon for Cirrostratus rankCirrostratus
Jun 15, 2023

Help with APM irule to append URI and URL to call to kill individual sessions

Hi I'm trying to figure out the best way to get this to work.  I need to take the incoming http request https://application.mydomain.com and append a URI.  Part of it is static URL/static/static/stat...
application delivery
devops
Stan_PIRON_F5's avatar
Stan_PIRON_F5
Icon for Employee rankEmployee
Jun 19, 2023

Hi,

If you want to redirect first request after authentication, you can use a variable assign with:

session.server.landinguri = expression expr{ "/static/static/static/[mcget {session.saml.last.attr.name}]" }

It will force to redirect the user to this url after succeded authentication

If you want to redirect for any request on / URL, you can use following irule

when ACCESS_ACL_ALLOWED {
  if { [HTTP::path] == "/" } {
    ACCESS::respond 302 noserver Location "/static/static/static[ACCESS::session data get "session.saml.last.attr.name"]"
  }
}
SteveD1979's avatar
SteveD1979
Icon for Cirrostratus rankCirrostratus
Jun 20, 2023

Thanks Stan.  When I try adding the variable assign I get a page can't be found and I don't see the URI appended in my browser.  When I use the Irule i see the redirect in the browser but I still get a page can't be found.  I'm thinking because of the DNS loop and the URL being tied to VIP #1.

  • Michael_Waechter's avatar
    Michael_Waechter
    Icon for Employee rankEmployee
    Jun 20, 2023

    You will have to apply the select virtual after the apm policy processing. Since the VIP #2 does not have a dns entry, you will need to force it through via an irule to select the virtual after processing. Personally I'd recommend adding a dns entry, and make it simple, but you can do it in an irule to forcefully select the virtual.