For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

SighclopsII_189's avatar
SighclopsII_189
Icon for Nimbostratus rankNimbostratus
Feb 25, 2015

iRule to allow access to a uri only from a specific source subnet

I am looking to create an iRule that will allow access to uri's containing specifics when coming from an approved subnet but dropping requests to those uri's when coming from all other subnets.   ...
application delivery
deployment
devops
iRules
LTM
Michael_Jenkins's avatar
Michael_Jenkins
Icon for Cirrostratus rankCirrostratus
Feb 25, 2015

This should work based on your iRule (just changed the 

||
to 
&&
to make it and)

when HTTP_REQUEST { 
    if { ([HTTP::uri] contains "/something/bla/test/testing") && ([IP::addr [IP::client_addr] equals 10.1.1.0/24]) } {
        pool My_Web_Pool
    } else {
        HTTP::respond 200 content {   Sorry Page   Sorry, this Page is restricted.   } 
    } 
}

Or try this updated one

when HTTP_REQUEST {
     The switch statement is good for conditionals and easy to manage. 
     The '-glob' parameter marks the switch to allow wildcards (the "*")
    switch -glob -- [string tolower [HTTP::uri]] {
        "*/something/test/testing*" {
            if { [IP::addr [IP::client_addr] equals 10.1.1.0/24] } {
                 Process the traffic
                pool POOL_NAME
            } else {
                HTTP::respond 200 content {   Sorry Page   Sorry, this Page is restricted.   } 
            }
        }
    }
}