iRule assistance

Question

Dear Community,We ran into an issue last week where one of our app support members was logged into a production web portal (mistakenly thinking she was in the pre-production portal) and she made some changes in the production portal that caused an outage. Management has since asked if it would be possible to do the following:-When a user is logged into a production portal (F5 Virtual Server with web tier pool behind it) from an internal IP address, that the F5 alter the HTTP response that places a transparent header for the user. The header might be something like "PRODUCTION PORTAL". They dont really want to have to alter the static content of the page, they would prefer to do this dynamically. This way when internal users are in the production portal that header will be there to remind them that they are in fact in the production portal. External users shouldnt see the transparent header because they arent coming from an internal IP address.&nbsp;Is this possible with an iRule or other mechanism? Thanks for any feedback you can provide.

youssef1 · Answer

HI,You can achieve your need easly:first create a DG with your internal IP:Internal_userThen use this IP. if you come from internal network this irule inser a header with the following header:name: envvalue: prodwhen CLIENT_ACCEPTED {
set header 0
if { [class match [IP::client_addr] equals Internal_user] } {
set header 1
}
}
&nbsp;
when HTTP_RESPONSE {
if {$header}
HTTP::header insert env prod
}
}keep me in touchregards

youssef1 · Answer

Hi,&nbsp;I understand your need. you were not talking about adding an HTTP header but a header in your web page.it means that you have to modify your page but in a controlled way.&nbsp;Example below: you will have to rewrite your response by adding needed style and contents in order to display Production Notification.&nbsp;&lt;!DOCTYPE html&gt;
&lt;html&gt;
&lt;head&gt;
&lt;style type="text/css"&gt;
body { margin:0; }
#titre { background: #fd0; width:100%; text-align:center; position: fixed; }
&lt;/style&gt;
&lt;/head&gt;
 
&lt;body&gt;
&lt;div id="titre"&gt;PRODUCTION&lt;/div&gt;
&lt;br&gt;contents bla bla bla&lt;br&gt;
&lt;/body&gt;
 
&lt;/html&gt;If you show me your HTML application code I can help you to achieve your need.&nbsp;regards,

ccraddock · Answer

Youssef,&nbsp;Thanks so much for the reply! I will try this out and let you know either today or Monday if it worked!

ccraddock · Answer

Youssef,&nbsp;After trying out this iRule I think there may have been a miscommunication. On the HTTP Response I need something that will alter the HTML and add an HTML Header that says "PRODUCTION!" The HTTP Header is different from modifying the HTML in the response. I basically need an iRule or other policy that will edit the HTML in the response by adding "PRODUCTION!" to it. Is this possible?&nbsp;Thanks.

ccraddock · Answer

Youssef,&nbsp;Here is the code for the login page. Once caveat is we would like this HTML text to be displayed on every page even after login. Is this possible?&nbsp;Thanks.&nbsp;&lt;!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN""http://www.w3.org/TR/html4/loose.dtd"&gt;&lt;html&gt;&lt;head&gt;&lt;meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"&gt;&lt;title&gt;CEDAR Frontier - Login&lt;/title&gt;&lt;link href="/css/frontier.css" rel="stylesheet" type="text/css"&gt;&lt;script type="text/javascript" LANGUAGE="JavaScript"&gt;function doload(){	document.loginForm.username.focus();}&nbsp;function processSubmit(){	var ef = document.loginForm;	if((ef.username.value == null) || (ef.username.value == '')){		alert("Please enter User ID");		ef.username.focus();	}	else if((ef.userpassword.value == null) || (ef.userpassword.value == '')){		alert("Please enter password");		ef.userpassword.focus();	}	else{		ef.submit();	}&nbsp;}&nbsp;function handleKeydown(e){&nbsp;if(!e)&nbsp;&nbsp;var e = window.event;&nbsp;&nbsp;key = e.keyCode;&nbsp;if(key == 13){&nbsp;processSubmit();&nbsp;}}document.onkeydown = handleKeydown;&nbsp;&lt;/script&gt;&lt;/head&gt;&lt;body&gt;&lt;a name="top"&gt;&lt;/a&gt;&lt;div class="page"&gt;	&nbsp;&lt;table border="0" cellpadding="0" cellspacing="0" width="100%"&gt;	&nbsp;&nbsp;&lt;tbody&gt;	&nbsp;&nbsp;&nbsp;&lt;tr&gt;	&nbsp;&nbsp;&nbsp;&nbsp;&lt;td width="44%" valign="top"&gt;&lt;a href="/"&gt;&lt;img src="/images/logo.svg" style="height: 45px;" alt="Logo" class="logo"&gt;&lt;/a&gt;&lt;/td&gt;	&nbsp;&nbsp;&nbsp;&nbsp;&lt;td width="46%"&gt;&amp;nbsp;&lt;/td&gt;	&nbsp;&nbsp;&nbsp;&nbsp;&lt;td width="10%" valign="top"&gt;&lt;div class="markbox"&gt;&lt;a href="http://www.cedardoc.com/" target="_blank"&gt;&lt;img src="/images/PoweredBy_CEDAR.gif" alt="" border="0"&gt;&lt;/a&gt;&lt;/div&gt;&lt;/td&gt;	&nbsp;&nbsp;&nbsp;&lt;/tr&gt;	&nbsp;&nbsp;&lt;/tbody&gt;	&nbsp;&lt;/table&gt;	&nbsp;&lt;br&gt;	&nbsp;&lt;div class="navigation"&gt;	 	&lt;ul class="tierone"&gt;	&nbsp;&nbsp;	&lt;li&gt;&amp;nbsp;&lt;/li&gt;	&nbsp;	&lt;/ul&gt;		&lt;ul class="tiertwo"&gt;			&lt;li&gt;&amp;nbsp;&lt;/li&gt;	&nbsp;&nbsp;&lt;/ul&gt;	&lt;/div&gt;&nbsp;&lt;div class="content"&gt;&nbsp;&nbsp;&lt;table width="100%" border="0" cellspacing="0" cellpadding="0"&gt;&nbsp;&nbsp;&nbsp;&lt;tr&gt;&nbsp;&nbsp;&nbsp;&nbsp;&lt;td width="50%" nowrap class="pagetitle"&gt;Welcome!&lt;/td&gt;&nbsp;&nbsp;&nbsp;&nbsp;&lt;td width="50%" align="right" nowrap&gt;&lt;/td&gt;&nbsp;&nbsp;&nbsp;&lt;/tr&gt;&nbsp;&nbsp;&nbsp;&lt;tr&gt;&nbsp;&nbsp;&nbsp;&nbsp;&lt;td width="50%" nowrap class="subtitle"&gt;Log in&lt;/td&gt;&nbsp;&nbsp;&nbsp;&nbsp;&lt;td width="50%" align="right" nowrap&gt;&lt;/td&gt;&nbsp;&nbsp;&nbsp;&lt;/tr&gt;&nbsp;&nbsp;&lt;/table&gt;&nbsp;&nbsp;&lt;form name="loginForm" method="POST" action="/frontier/action/processLogin" onsubmit="javascript: return false"&gt;&nbsp;&nbsp;&nbsp;&lt;input type="hidden" name="client_id" value="170"&gt;&nbsp;&nbsp;&nbsp;&lt;table border="0" align="center" cellpadding="4"&gt;&nbsp;&nbsp;&nbsp;&nbsp;&lt;tr&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;td align="right"&gt; User ID:&lt;/td&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;td align="left"&gt;&lt;input type="text" name="username"&gt;&lt;/td&gt;&nbsp;&nbsp;&nbsp;&nbsp;&lt;/tr&gt;&nbsp;&nbsp;&nbsp;&nbsp;&lt;tr&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;td align="right" valign="top"&gt;Password:&lt;/td&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;td align="left" valign="top"&gt;&lt;input type="password" name="userpassword" autocomplete="off"&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;br&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;a href="/frontier/action/forgotPw?client_id=170" class="description"&gt;Forgot Password?&lt;/a&gt; &amp;nbsp;&amp;nbsp;&lt;a href="/frontier/action/forgotPw?client_id=170&amp;actionType=showForgotUserId" class="description"&gt;Forgot User ID?&lt;/a&gt; &lt;/td&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;/tr&gt;&nbsp;&nbsp;&nbsp;&nbsp;&lt;tr&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;td align="right"&gt;&amp;nbsp;&lt;/td&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;td align="left"&gt;&lt;/td&gt;&nbsp;&nbsp;&nbsp;&nbsp;&lt;/tr&gt;&nbsp;&nbsp;&nbsp;&nbsp;&lt;tr&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;td align="center"&gt;&amp;nbsp;&lt;/td&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;td align="center"&gt;&lt;div class="buttonstyle"&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;div class="buttoneach"&gt;&lt;a href="javascript:processSubmit()"&gt;Submit&lt;/a&gt;&lt;/div&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;/div&gt;&lt;/td&gt;&nbsp;&nbsp;&nbsp;&nbsp;&lt;/tr&gt;&nbsp;&nbsp;&nbsp;&lt;/table&gt;&nbsp;&nbsp;&lt;/form&gt;&nbsp;&nbsp;&lt;p&gt;&amp;nbsp;&lt;/p&gt;&nbsp;&lt;/div&gt;&nbsp;&lt;table width="100%" border="0" cellspacing="0" cellpadding="0"&gt;&nbsp;&nbsp;&lt;tr&gt;&nbsp;&nbsp;&nbsp;&lt;td align="left"&nbsp;nowrap class="footermenu"&gt;&amp;nbsp;&lt;/td&gt;&nbsp;&nbsp;&nbsp;&lt;td class="frontier"&gt;llFrontier by CEDAR document technologies&lt;/td&gt;&nbsp;&nbsp;&lt;/tr&gt;&nbsp;&lt;/table&gt;&lt;/div&gt;&lt;/body&gt;&lt;/html&gt;

Forum Discussion

iRule assistance

Recent Discussions

About Customized AWAF Rules

Blocking client that uses existing cookie

Different SNAT for each member in the pool

HIRE A LICENSED BTC / CRYPTOCURRENCY RECOVERY HACKER — THE HACK BUSTER RECOVERY.

Question regarding the F5 vulnerabilities page API

Related Content

iRule assistance for subfolder redirect

iRule assistance

iRule assistance

iRule assistance

iRULE regsub error