For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

David_Leach_148's avatar
David_Leach_148
Icon for Nimbostratus rankNimbostratus
Mar 26, 2014
Solved

I rule to only allow GETs to elastic

We presently don't have any iRules in place so I'm a little new to this. What we're wanting is to only allow GETS to a particular virtual host and to drop all other types of requests.   What is th...
application delivery
BIG-IP Access Policy Manager (APM)
devops
iRules
security
  • Richard__Harlan's avatar
    Richard__Harlan
    Mar 26, 2014

    You could do something simple like

    when HTTP_REQUEST {
    if { [HTTP::method] equals "GET" } {
       pool 
       } else {
         HTTP::respond 405 "Method not allowedMethod not allowed"
         }
}
safeinst_110941's avatar
safeinst_110941
Icon for Cirrus rankCirrus
Mar 26, 2014
when HTTP_REQUEST {
if { ![[HTTP::method] equals "GET"] } {
   drop
   } 
}

Richard, I like where you are going with that iRule, you might want to simplify it down to something like above.