Forum Discussion
kend
Dec 12, 2011Altostratus
HTTP iRule
I found this iRule on the DevCentral site at the following URL, http://devcentral.f5.com/wiki/iRule...eader.ashx
It does exactly what I need it to do except work with HTTPS. How would I modify this iRule to work with HTTPS?
- hooleylistCirrostratusHi Ken,
- hooleylistCirrostratusAlso note that that iRule would allow a malicious user to send HTTP traffic to any pool which ends with _pool configured on your LTM. From a security standpoint, it would be a lot safer to create a whitelist of allowed pool names and check that the parsed pool name is part of it before allowing the client to get to the pool. You could do this by defining the allowed pool names in a data group and then using the class command to look up the requested host in the data group.
- kendAltostratusI read the link you provided, but I am unclear on how to create the data group itself. Any help would be appreciated.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects