Forum Discussion
Shawn_Salyers_8
Nimbostratus
Apr 15, 2010Http Https Single Virtual Server Question
I have configured the Http Https Single Virtual Server iRule found at http://devcentral.f5.com/wiki/default.aspx/iRules/HttpHttpsSingleVirtualServer.html and it works awesome. My question is, what (and where) would I add to this to limit it by the connecting IP address?
Thanks for the help!
Shawn
3 Replies
Sort By
- James_Quinby_46Historic F5 AccountYou want to restrict access to the virtual server by IP address? Just want to make sure I understand what your endgame is here....
- hoolio
Cirrostratus
Hi Shawn,when CLIENT_ACCEPTED { Save the VIP name, client IP:port as a log prefix to make the log lines shorter set log_prefix "[IP::client_addr]:[TCP::client_port]" Check if client IP is not in the allowed clients class if {not [matchclass [IP::client_addr] equals $::allowed_clients_class]}{ if {$::single_vs_debug}{log local0. "$log_prefix: Rejecting connection from disallowed client IP"} Send a TCP reset reject Disable further iRule processing event disable all }
- James_Quinby_46Historic F5 Account....or that will work. O_o
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects