Forum Discussion

Rustic_57941's avatar
Rustic_57941
Icon for Nimbostratus rankNimbostratus
Dec 17, 2012

iRule Newbie - Limit Access to URIs based on IP Source

Hi,   I am just starting out in the wold of iRules - apologises for any newbie errors.   We have a test site that where access control was based on a firewall ACL - pretty simple worked fine. ...
application delivery
dev
devops
iRules
Mohamed_Lrhazi's avatar
Mohamed_Lrhazi
Icon for Altocumulus rankAltocumulus
Dec 17, 2012
Maybe your data could be like so:

 

 

/authenticate:=0.0.0.0/32

 

/web/landing_page:=1.2.3.4/32,1.2.3.5/32,192.168.0.0/16

 

...

 

then your irule could lookup the list of subnets for that matches the current URI, split it and then test the client_ip against each, if no match found, reject.

 

 

else, fall through and use default pool.

 

 

Maybe there is a much simpler way. read about class for some ideas maybe: https://devcentral.f5.com/wiki/irules.class.ashx