Forum Discussion
wlopez
Cirrocumulus
Aug 19, 2021iRule to disable OneConnect for a list of source IP addresses
I'm trying to resolve an issue with a legacy application that doesn't like OneConnect. All traffic from the legacy application originates from a know list of source IP addresses, which I'm including...
Dario_Garrido
Noctilucent
Aug 27, 2021wlopez
Cirrocumulus
Sep 01, 2021Thanks for replying.
I had read that article but am not clear of how to use it to accomplish my goal.
I'm looking on how to take OneConnect completely out of the picture for all traffic originated from the list of IP addresses included in the "Legacy_App" iRule data group.
Will something like this accomplish that?
when CLIENT_ACCEPTED {
if {[class match [IP::client_addr] equals Legacy_App]} {
ONECONNECT::reuse disable
pool pool_Legacy
}
}
- Dario_GarridoSep 02, 2021
Noctilucent
Actually, "CLIENT_ACCEPTED" is not a valid event.
I would use this instead:
when HTTP_REQUEST { if {[class match [IP::client_addr] equals Legacy_App]} { ONECONNECT::reuse disable pool pool_Legacy } }
Let me know if it works as expected.
Regards,
Dario.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects