For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JP_42120's avatar
JP_42120
Icon for Nimbostratus rankNimbostratus
Oct 18, 2012

irule performance: combine multiple irules

Hi,   We have an several irules that we are trying simplify and combine for better performance.   first to block certain URI's     when HTTP_REQUEST {   switch [HTTP::uri] {   "...
application delivery
dev
devops
iRules
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Oct 19, 2012
And now I've reordered it a bit so if you redirect or respond with a 404 the iRule quits early. Regardless, I've a feeling nitass will come along and make it even better; 


when HTTP_REQUEST {
if { switch [string tolower [HTTP::uri]] } {
"/proxy/"  -
"/content/xmlmovies/undefined" -
"/duas/"  {
HTTP::respond 404 content "404 - file not found." 
return }
}

 Redirect to certain URI's to HTTPs
if { [TCP::local_port] == 80 } {
  switch -glob [string tolower [HTTP::path]] {
   "/login*" -
   "/app/login_user*" -
   "/app/new*" -
   "/app/associate_new*" -
   "/account*" {
    HTTP::redirect https://[getfield [HTTP::host] ":" 1][HTTP::uri]
    return
           }
       }
       }

 To log request with certain content size
if { [HTTP::header Content-Length] >= 9000 } {
log local0. "[HTTP::header Content-Length] byte [HTTP::method] request from [IP::client_addr] for [HTTP::host][HTTP::uri]"
}
}