Forum Discussion
NimbostratusHow to block HTTP/S requests to a VIP if the URI contains certain path
CirrostratusHi,
Why use an iRule?
Can't you use a LTM Policy attached to the VS?
A LTM Policy let's you define rules to adjust behavior of the VS. If the path contains this value, just reset the traffic.
Go to Local Traffic -> Policies -> Policy List and create a new policy.
In the policy add a new rule (give it a name) and do the following:
HTTP URI Path contains your path, Reset Traffic.
Regards, Martijn.
ccraddock_33000Martijn,
How would such a policy be written?
Thanks.
- Martijn_144688
Hi,
I have add some more information in my answer.
Do not forget to attached the LTM policy to the VS in the Resources tab of the Virtual Server.
Hopes this helps
Martijn.
- ccraddock_33000
Martijn,
I was having issues with the "Actions" portion so I went back to the irule and fixed it. The error I was getting "01070151:3: Rule [/Common/irule_block_javax] error: /Common/irule_block_javax:6: error: [command is not valid in the current scope][}]" was stating that in line 6 I had one too many curly braces. I deleted the curly brace in line 6 and the irule now looks like this and is working:
when HTTP_REQUEST { if { [string tolower [HTTP::uri]] contains "/javax.faces.resource/dynamiccontent.properties.xhtml" } { discard } }Thanks for your help.
