Forum Discussion

David_Leach_148's avatar
David_Leach_148
Icon for Nimbostratus rankNimbostratus
Mar 26, 2014
Solved

I rule to only allow GETs to elastic

We presently don't have any iRules in place so I'm a little new to this. What we're wanting is to only allow GETS to a particular virtual host and to drop all other types of requests.   What is th...
application delivery
BIG-IP Access Policy Manager (APM)
devops
iRules
security
  • Richard__Harlan's avatar
    Richard__Harlan
    Mar 26, 2014

    You could do something simple like

    when HTTP_REQUEST {
    if { [HTTP::method] equals "GET" } {
       pool 
       } else {
         HTTP::respond 405 "Method not allowedMethod not allowed"
         }
}
IheartF5_45022's avatar
IheartF5_45022
Icon for Nacreous rankNacreous
Mar 26, 2014

The original request mentioned virtual Hosts so perhaps the Host headers should be referenced?

when HTTP_REQUEST {
    if {[HTTP::host] eq "mysite.com"} {
        if { ![[HTTP::method] equals "GET"] } {
            drop
        } 
    }
}