Forum Discussion

ccraddock_33000's avatar
ccraddock_33000
Icon for Nimbostratus rankNimbostratus
Feb 27, 2019

iRule assistance

Dear Dev Central, I have some specific requirements for an iRule but am not exactly sure how to make it all work in one iRule or if I should use 2 iRules evaluated sequentially. The iRules are as f...
BIG-IP
iRules
security
uzair's avatar
uzair
Icon for Nimbostratus rankNimbostratus

Looks like this iRule you require. condition sequence can be changed based on the preference.

 

when HTTP_REQUEST { if { !([class match [HTTP::uri] contains api_string])} { discard log local0. "connection DISCARDED from [IP::client_addr]" } elseif { [HTTP::path] starts_with "/resources/" } { pool pool_atldevngn } else { pool pool_atlapipool1 } }

 

Michael_Saleem1's avatar
Michael_Saleem1
Icon for Cirrus rankCirrus
Feb 28, 2019

You're most welcome; that's what this community is here for! :-D

 

I think there is a conflict with your latest iRule (I may be wrong).

 

Let's say an HTTP request comes in for: http://www.example.com/resources/

 

My thinking is that the first if statement will evaluate as true so the F5 will select the pool pool_atldevngn. However, the F5 will not stop there and continue to process the elseif statement which will also evaluate as true (assuming that there is no match against data group api_string). The request will therefore be discarded.

 

Anyone else agree/ disagree?