For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Matt_Breedlove_'s avatar
Matt_Breedlove_
Icon for Nimbostratus rankNimbostratus
May 19, 2014

I did this awhile ago. Here is the best way to do this Your prefix URI's below are /xl and /ce. The source IP list that secure each customers prefix URI's go into the acl datagroup objects as address type


when HTTP_REQUEST {
   switch -glob [URI::decode [string tolower [HTTP::uri]]] {
      /xl* { if { ([class match [IP::remote_addr] equals $::xl_acl]) } { return } }
      /ce* { if { ([class match [IP::remote_addr] equals $::ce_acl]) } { return } } 

      default {
         discard
      }
   }
}