For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

pablitop_134672's avatar
pablitop_134672
Icon for Nimbostratus rankNimbostratus
Apr 14, 2014

iRule to only allow traffic from 3 differents subnets

I need to create an irule that just allow traffic when its from 3 subnets: 10.10.17.0/24, 10.10.18.0/24 and 10.10.19.0/24. I don´t know if the one below, works like I want. Could anybody please help ...
application delivery
devops
iRules
LTM
security
IheartF5_45022's avatar
IheartF5_45022
Icon for Nacreous rankNacreous
Apr 15, 2014

Datagroups are highly performant so no CPU worries there;-

when HTTP_REQUEST {
    if {[string tolower [HTTP::path]] ends_with "/xxx" && ![class match [IP::client_addr] equals dg_ip_whitelist] } {
        HTTP::respond 200 content "URL Blocked"
    }
}