iRule to allow access to a uri only from a specific source subnet

This wiki page talks about checking ip addresses.

Basically, the irule you're looking for would be similar to this. You should be able to change it up as necessary.

when HTTP_REQUEST {
     The switch statement is good for conditionals and easy to manage. 
     The '-glob' parameter marks the switch to allow wildcards (the "*")
    switch -glob -- [string tolower [HTTP::uri]] {
        "/something/test/testing" {
            if { [IP::addr [IP::client_addr] equals 10.1.1.0/24] } {
                 Process the traffic
                pool POOL_NAME
            } else {
                 Drop the connection (you can also use reject instead of drop)
                drop
            }
        }
    }
}

This should work based on your iRule (just changed the

||

to

&&

to make it and)

when HTTP_REQUEST { 
    if { ([HTTP::uri] contains "/something/bla/test/testing") && ([IP::addr [IP::client_addr] equals 10.1.1.0/24]) } {
        pool My_Web_Pool
    } else {
        HTTP::respond 200 content {   Sorry Page   Sorry, this Page is restricted.   } 
    } 
}

Or try this updated one

when HTTP_REQUEST {
     The switch statement is good for conditionals and easy to manage. 
     The '-glob' parameter marks the switch to allow wildcards (the "*")
    switch -glob -- [string tolower [HTTP::uri]] {
        "*/something/test/testing*" {
            if { [IP::addr [IP::client_addr] equals 10.1.1.0/24] } {
                 Process the traffic
                pool POOL_NAME
            } else {
                HTTP::respond 200 content {   Sorry Page   Sorry, this Page is restricted.   } 
            }
        }
    }
}

Can you tell me how to add multiple URIs and multiple IP ranges to this?

 

Thanks! -Jeff

 

Hi,

 

You can do it with a local traffic policy instead of irule.

 

Policies support IP address condition since version 11.6.