HTTP header searching

Hi all.

 

 

Can someone help me with my understanding of searching http headers using iRules please?

 

 

I have a pool that inserts this in the http header:

 

ConnectionSourceIP:${client_addr}

 

 

What I want to do is with an iRule check for the existence of this in the header before the pool, and discard. i.e.

 

 

if (exists http_header "ConnectionSourceIP") {

 

log "IP Header Spoof from:${client_addr}"

 

discard

 

}

 

else {

 

use pool pool_1

 

}

 

 

sort of thing. What I want to do is stop someone trying to spoof source IP address as this header field will be checked by the web application.

 

 

Any ideas? Will this work or is there a better way?

 

 

Thanks

 

- Derek.