Forum Discussion
wlopez
Aug 19, 2021Cirrocumulus
iRule to disable OneConnect for a list of source IP addresses
I'm trying to resolve an issue with a legacy application that doesn't like OneConnect. All traffic from the legacy application originates from a know list of source IP addresses, which I'm including...
wlopez
Sep 01, 2021Cirrocumulus
Thanks for replying.
I had read that article but am not clear of how to use it to accomplish my goal.
I'm looking on how to take OneConnect completely out of the picture for all traffic originated from the list of IP addresses included in the "Legacy_App" iRule data group.
Will something like this accomplish that?
when CLIENT_ACCEPTED {
if {[class match [IP::client_addr] equals Legacy_App]} {
ONECONNECT::reuse disable
pool pool_Legacy
}
}
- Sep 02, 2021
Actually, "CLIENT_ACCEPTED" is not a valid event.
I would use this instead:
when HTTP_REQUEST { if {[class match [IP::client_addr] equals Legacy_App]} { ONECONNECT::reuse disable pool pool_Legacy } }
Let me know if it works as expected.
Regards,
Dario.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects