Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

EduardoSousa's avatar
EduardoSousa
Icon for Altocumulus rankAltocumulus
3 years ago

HTTP request to allow specific header

Hello guys. I'm new to irules, I was looking for some irule that only allows a specific header to access the application, if you don't have this header allowed it will drop this connection attempt. ...
security
EduardoSousa's avatar
EduardoSousa
Icon for Altocumulus rankAltocumulus
3 years ago

Hello Pete.

Is it possible to change the Irule to read the value and the header? For example, name = X-Custom-header and value = "ABCDEF123456"

  • PeteWhite's avatar
    PeteWhite
    Icon for Employee rankEmployee
    3 years ago
    when HTTP_REQUEST { 
    if { (! [HTTP::header exists "Header_name"]) || ([HTTP::header value "X-Custom-header" != "ABCDEF123456) } { 
        drop
    }
}