Forum Discussion

Vivian_Peng_967's avatar
Vivian_Peng_967
Icon for Nimbostratus rankNimbostratus
Feb 15, 2007

How I can write a iRule to selectively apply client authentication besed on their uri

Hi, I hope I can get some help here. I need to come up an idea to selectively apply client authentication to my https site, which means I don't want to require all users with client authentication but only few selective ones who are using specific uri to access the site. So an illustration would look like below:

 

 

https://b2b.mysite.com/ - no client authentication required

 

https://b2b.mysite.com/wm.gateway.A-client:receive - client authentication to be required with client A's root ca

 

https://b2b.mysite.com/wm.gateway.B-client:receive - client authentication to be required with client B's certificate.

 

https://b2b.mysite.com/wm.gateway.C-client:receive - Does not require client authentication.

 

 

etc..........

 

 

My question is whether it's possible an iRule can accomplish my goal? If so, where I should get startet? My bigip is on v9.2.5. I have searched in the forums but not quite sure if there is a solution there to meet my need. Plus I have to admit I am not proficient at writing iRules. Any help would be greatly appreciated.

 

 

Vivian

 

1 Reply

  • Did you ever solve your issue?

     

     

    I have a similar requirement and would be interested in learning how you solved it