For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ccraddock's avatar
ccraddock
Icon for Cirrus rankCirrus
Sep 09, 2019

iRule assistance

Dear Community, We ran into an issue last week where one of our app support members was logged into a production web portal (mistakenly thinking she was in the pre-production portal) and she made so...
BIG-IP
devops
iRules
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Sep 13, 2019

HI,

You can achieve your need easly:

first create a DG with your internal IP:

Internal_user

Then use this IP. if you come from internal network this irule inser a header with the following header:

name: env

value: prod

when CLIENT_ACCEPTED {
set header 0
if { [class match [IP::client_addr] equals Internal_user] } {
set header 1
}
}
 
when HTTP_RESPONSE {
if {$header}
HTTP::header insert env prod
}
}

keep me in touch

regards

  • ccraddock's avatar
    ccraddock
    Icon for Cirrus rankCirrus
    Sep 13, 2019

    Youssef,

     

    Thanks so much for the reply! I will try this out and let you know either today or Monday if it worked!

  • ccraddock's avatar
    ccraddock
    Icon for Cirrus rankCirrus
    Sep 16, 2019

    Youssef,

     

    After trying out this iRule I think there may have been a miscommunication. On the HTTP Response I need something that will alter the HTML and add an HTML Header that says "PRODUCTION!" The HTTP Header is different from modifying the HTML in the response. I basically need an iRule or other policy that will edit the HTML in the response by adding "PRODUCTION!" to it. Is this possible?

     

    Thanks.