irule for VIP to deny all ports except a few

There's two ways you can achieve this that I can think of;

 

 

1) Use a packet filter (everyone seems to prefer iRules)

 

2) Use the IP: CLIENT_ACCEPTED event and something like this (but with more ports using switch or a data group);

 

 

when CLIENT_ACCEPTED {

 

if { ! [TCP::local_port] == 80} {

 

drop

 

return

 

}

 

}