For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ccraddock_33000's avatar
ccraddock_33000
Icon for Nimbostratus rankNimbostratus
Feb 27, 2019

iRule assistance

Dear Dev Central, I have some specific requirements for an iRule but am not exactly sure how to make it all work in one iRule or if I should use 2 iRules evaluated sequentially. The iRules are as f...
BIG-IP
iRules
security
uzair's avatar
uzair
Icon for Nimbostratus rankNimbostratus
Feb 28, 2019

Looks like this iRule you require. condition sequence can be changed based on the preference.

 

when HTTP_REQUEST { if { !([class match [HTTP::uri] contains api_string])} { discard log local0. "connection DISCARDED from [IP::client_addr]" } elseif { [HTTP::path] starts_with "/resources/" } { pool pool_atldevngn } else { pool pool_atlapipool1 } }

 

ccraddock_33000's avatar
ccraddock_33000
Icon for Nimbostratus rankNimbostratus
Feb 28, 2019

I truly appreciate all the comments and feedback on this post. I think I may have figured it out. Could you check the logic on this irule and let me know if you see any conflicts? Thanks.

when HTTP_REQUEST { 
  if {[HTTP::path] starts_with "/resources/" } { 
    pool pool_atldevngn
  } elseif { !([class match [HTTP::uri] contains api_string ])} { 
    discard
    log local0. "connection DISCARDED from [IP::client_addr]
  } else {
    pool pool_atlapipool1
  }
}