For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

FFX2014_23725's avatar
FFX2014_23725
Icon for Nimbostratus rankNimbostratus
Jul 17, 2014

iRule to block HTTPS uri

I have a request from a customer to block a specific HTTPS uri. When the URI is hit, the connection is rejected and return a http 404 error. URI: https://aaaa.com/bbb/ccc.xml I just wanted to con...
application delivery
devops
iRules
LTM
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jul 17, 2014

You're presumably going to have this iRule applied to an HTTP or HTTPS VIP, so the http:// or https:// in the request will be respective to the applied VIP. You can evaluate the protocol scheme, but you shouldn't have to. Further, the HTTP_REQUEST event is going to be triggered on an HTTP request to the VIP, which the user is going to generally request by name (or IP). If you filter on the name in the iRule, then the user can bypass the condition by using the IP address to access the VIP.