For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

adrian_171483's avatar
adrian_171483
Icon for Cirrus rankCirrus
May 26, 2016

Irule to match and redirect on port / URI condition

Heres what we a re trying to do..

Got a number of sites using a single IP address on http, depending on the URL we want to re-direct to another port with a new URL then drop to a specific pool based on the port chosen. its like a double match

I have come up with this Irule, but im not convinced it will work.

We want to stick with "Switch" if possible as this is our general standard... 

when HTTP_REQUEST {
switch  [string tolower [HTTP::host] [TCP::local_port]] {
    "site1.somesite.com" { 
        HTTP::redirect "http://site1.somesite.com:8001/App1[HTTP::uri]" 
        return
    } 
"site2.somesite.com" { 
        HTTP::redirect "http://site2.somesite.com:8002/App2[HTTP::uri]" 
        return
    } 
    "8001" {
        pool site1
    }
   } 
    "8002" {
        pool site2
    }
}

}

application delivery
iRules

3 Replies

  • Yann_Desmarest's avatar
    Yann_Desmarest
    Icon for Cirrus rankCirrus
    May 26, 2016

    Hi,

    I think that the irule below should work for you : 

    when HTTP_REQUEST {
    switch -glob [string tolower [HTTP::host]] {
        "site1.somesite.com" { 
            HTTP::redirect "http://site1.somesite.com:8001/App1[HTTP::uri]" 
            return
        } 
        "site2.somesite.com" { 
            HTTP::redirect "http://site2.somesite.com:8002/App2[HTTP::uri]" 
            return
        } 
        "*:8001" {
            pool site1
        } 
       "*:8002" {
            pool site2
        }
    }
}
  • adrian_171483's avatar
    adrian_171483
    Icon for Cirrus rankCirrus
    May 26, 2016

    Actually Having thought about it, I guess that I could just build the Virtual Servers to listen on the Return ports..

    when HTTP_REQUEST {

    switch [string tolower [HTTP::host] [TCP::local_port]] { "site1.somesite.com" { HTTP::redirect "http://site1.somesite.com:8001/App1[HTTP::uri]" return } "site2.somesite.com" { HTTP::redirect "http://site2.somesite.com:8002/App2[HTTP::uri]" return } } }

    Then the return http :port would just be collected by the other VIP and forwarded to the relevant Pool attached to that VS

  • Vijay_E's avatar
    Vijay_E
    Icon for Cirrus rankCirrus
    May 26, 2016

    I would recommend adding a "Default pool" option to the iRule or use OneConnect within the VS. If not, the pool member selection may not work as expected under certain circumstances.

     

    Reference: SOL9800