Forum Discussion

ccraddock_33000's avatar
ccraddock_33000
Icon for Nimbostratus rankNimbostratus
Feb 27, 2019

iRule assistance

Dear Dev Central, I have some specific requirements for an iRule but am not exactly sure how to make it all work in one iRule or if I should use 2 iRules evaluated sequentially. The iRules are as f...
BIG-IP
iRules
security
uzair's avatar
uzair
Icon for Nimbostratus rankNimbostratus

Looks like this iRule you require. condition sequence can be changed based on the preference.

 

when HTTP_REQUEST { if { !([class match [HTTP::uri] contains api_string])} { discard log local0. "connection DISCARDED from [IP::client_addr]" } elseif { [HTTP::path] starts_with "/resources/" } { pool pool_atldevngn } else { pool pool_atlapipool1 } }

 

Michael_Saleem1's avatar
Michael_Saleem1
Icon for Cirrus rankCirrus
Feb 28, 2019

Do you want all requests going to /resources/ to be allowed and sent to pool pool_atldevngn even if the URI does NOT contain one of the values in the data group api_string? If so, the following might work also:

1) Checks if the URI contains one of the values in data group *api_string. If it it DOES, then send the request to pool pool_atlapipool1. If it does NOT, then:

2) Check if the path starts with /resources/. If it does, send the request to pool pool_atldevngn. If not, discard (drop) the request

when HTTP_REQUEST { 
    if { !([class match [HTTP::uri] contains api_string])} { 
        if { [HTTP::path] starts_with "/resources/" } { 
            pool pool_atldevngn 
        }
        else {
            discard 
            log local0. "connection DISCARDED from [IP::client_addr]" 
        } 
    } 
    else { 
        pool pool_atlapipool1 
    } 
}