For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nityanand's avatar
Nityanand
Icon for Nimbostratus rankNimbostratus
Aug 09, 2016

irule http_response F5 error page should not intercept server response for one of uri (LTM 10.2.4)

Hello Team,

 

I have single irule which contains multiple hostname & uri to direct request to respective pool and have F5 http response error page like below. Now, i received request that to one of the uri (example start with /platform) should bypass below F5 error http response and process only only original server response.

 

Current below response rule : when HTTP_RESPONSE { if {([HTTP::status] starts_with "5")} { HTTP::respond 500 content [b64decode [class element -value 0 ckid_error_500.html]] "Content-Type" "text/html" } }

 

Please help me to get the irule for uri "/platform" should bypass above F5 response and only response original server response.

 

application delivery
BIG-IP
iRules

2 Replies

  • Vijay_E's avatar
    Vijay_E
    Icon for Cirrus rankCirrus
    Aug 09, 2016

    Try this:

    when HTTP_RESPONSE { 
if { ([HTTP::status] starts_with "5") and (not([HTTP::header values Location] contains "/platform")) } { 
HTTP::respond 500 content [b64decode [class element -value 0 ckid_error_500.html]] "Content-Type" "text/html" 
} 
}
  • Kai_Wilke's avatar
    Kai_Wilke
    Icon for MVP rankMVP
    Aug 09, 2016

    Hi Nityanand,

    to use request-only informations in your response events, you could simply store the required informations into variables during one of the request events and then use the stored information during response events to perform certain checks...

    when HTTP_REQUEST {
    set path [HTTP::path]
}
when HTTP_REQUEST {
    if { ( [HTTP::status] starts_with "5" ) and not 
         ( [string tolower $low_path] starts_with "/platform") } then { 
        HTTP::respond 500 content [b64decode [class element -value 0 ckid_error_500.html]] "Content-Type" "text/html" 
    } 
}

    Cheers, Kai