For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Richard_Grigsb1's avatar
Richard_Grigsb1
Icon for Altostratus rankAltostratus
Oct 06, 2022

iRule that checks client IP and send to a pool.

I have a case where a Mulesoft private IP address cannot use the FQDN and must use the IP address of the F5 LTM VIP as the host name.  I need to limit this access to only IP addresses for the Mulesof...
application delivery
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Oct 06, 2022

Try this:

when HTTP_REQUEST {
    switch [HTTP::host] {
        "testwebsiteadminservice.tcbna.net" -
        "10.144.112.71" {
            if { [class match [IP::client_addr] equals Mulesoft_Non-Prod_VPC] } {
                pool DA7POLBACORE-TEST-Pool-1135-OLB-CONE_8444
            }
        }
        default {
            reject
        }
    }
}

Also, if the source addresses are in a single contiguous subnet, you could actually just define this subnet in the Source Address field of the VIP.