iRule based on domain

Hi,

you need to use the relevant string comparison - eq is for numbers. You can use contains, ends_with,starts_with,equals, matches_glob & matches_regex.

https://devcentral.f5.com/wiki/iRules.Operators.ashx

So this syntax is right?:

 when HTTP_REQUEST {
     if { [string tolower [HTTP::host]] contains "mydomain.com"} {
          pool $HTTP_pool 
    } else {
    HTTP::respond 403  
    }
}

So this syntax is right?:

 when HTTP_REQUEST {
     if { [string tolower [HTTP::host]] contains "mydomain.com"} {
          pool $HTTP_pool 
    } else {
    HTTP::respond 403  
    }
}

Great! Thank you.

Another question, i want to also be able allow traffic by ORIGIN, is it possible? When i say origin i mean the site from where im trying to reach (and i don't mean referrer)

This example of how i think it should be, not sure this is the right way to do it:

when HTTP_REQUEST {
    if { [HTTP::header exists Origin] } {
        set origin_host [HTTP::header Origin]
    }
}
when HTTP_RESPONSE {
    if { [info exists origin_host] } {
        if { $origin_host contains "mydomain1.com, mydomain2.com, mydomain3.com" } {
           pool $HTTP_pool
        } else {
    HTTP::respond 403  
    }
    }
}

Thank you for your time, however i don't understand how to fit in in my rule.. maybe someone can help me to write it correctly? Maybe i can do it simpler like this?

when HTTP_REQUEST {
    if { [HTTP::header exists Origin] } {
        set origin_host [HTTP::header Origin]
    }
}
when HTTP_RESPONSE {
    if { [info exists origin_host] } {
        if { $origin_host contains "mydomain1.com" } {
           pool $HTTP_pool
           }elsif{ 
            { $origin_host contains "mydomain2.com" } {
           pool $HTTP_pool
            }elsif{ 
            { $origin_host contains "mydomain3.com" } {
           pool $HTTP_pool
        } else {
    HTTP::respond 403  
    }
    }
}

I ended with this script, however its not working, i don't get any 403 respond nor accept when it spoof the origin, all i get is connection reset, any suggestions?

    when HTTP_REQUEST {
    if { [HTTP::header exists Origin] } {
        set origin_host [HTTP::header Origin]
    }
}

when HTTP_RESPONSE {
    if { [info exists origin_host] } {
        if { $origin_host contains "mydomain1.com" } {
           pool $HTTP_pool
       } elseif { $origin_host contains "mydomain2.com" } {
           pool $HTTP_pool
            } elseif { $origin_host contains "mydomain3.com" } {
           pool $HTTP_pool
       } else {
    HTTP::respond 403  
    }
    } else {
    HTTP::respond 403
    }
}

I think this might work better. You need to set the pool in HTTP_REQUEST event, not in response. Obviously this is globbing so in this case the Origin ends with mydomainX.com.

when RULE_INIT {
    set HTTP_pool "poolname"
}
when HTTP_REQUEST {
    if { [HTTP::header exists Origin] } {
        switch -glob ([string tolower [HTTP::header Origin]]) {
    "*mydomain1.com" { pool $HTTP_pool }
    "*mydomain2.com" { pool $HTTP_pool }
    "*mydomain3.com" { pool $HTTP_pool }
    default { HTTP::respond 403 }
    }
}
}

Thank you, i will test it now

I get syntax error:

01070151:3: Rule [/Common/Origin] error: /Common/Origin:19: error: [Duplicate event/priority][when HTTP_REQUEST { if { [HTTP::header exists Origin] } {set origin_host [HTTP::header Origin]} }]