Forum Discussion
iRule redirects to different VS Authentication Profiles
Is there a way to pick different VS authentication profiles to be used based on url/uri?
We currently redirect to different pools based on url/uri and would also like to use specific auth profiles now for each one also.
Current iRule snip:
when HTTP_REQUEST {
switch -glob "[string tolower [HTTP::host][HTTP::path]]" {
"*opm.gov/umbraco*" {
pool opm-uat-umbraco-pool }
"*uat.cioa.opm.gov*" {
pool opm-uat-cioa-pool }
What we would like:
when HTTP_REQUEST {
switch -glob "[string tolower [HTTP::host][HTTP::path]]" {
"*opm.gov/umbraco*" {
pool opm-uat-umbraco-pool
auth_profile xxxx_yyyy }
"*uat.cioa.opm.gov*" {
pool opm-uat-cioa-pool
auth_profile xxxx_zzzz }
2 Replies
- AMiles_377865
Cirrocumulus
Hello Keith,
While I have seen commands for getting the values of auth profiles, I haven't actually seen anything on selecting them through TCL. It might make more sense to redirect them to different virtual servers based on their url/uri, and have different auth profiles applied to those separate virtual servers.
Best of luck,
Austin
- Stanislas_Piro2
Cumulonimbus
Hi,
You must use layered virtual servers (1 virtual server for any requests, then forward to internal virtual servers based on SNI extension)
https://devcentral.f5.com/articles/sni-routing-with-big-ip-31348?tag=sni
This solution is only for Host name conditions, not based on path.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com