Forum Discussion

Saidur900's avatar
Saidur900
Icon for Nimbostratus rankNimbostratus
Aug 27, 2023

IRULE to restrict a specific url after initiated first session

Dear All I need help to make an irule for a reason. A and B both are clients. A is initiated a session from his device. A has an API result with some information with "xxx.com/api/info". After gett...
application delivery
iRules
security
Mohamed_Ahmed_Kansoh's avatar
Mohamed_Ahmed_Kansoh
Icon for MVP rankMVP
Aug 27, 2023

Hello Saidur900 , 

you can create an iRule or LTM policy has two conditions ( Source ip of user B & uri >> "xxx.com/api/info" ) 
and take action of dropping. 

I see that device id is not suitable as it forces you that user A and B must run the injected java script in bigip first response to create device id in bigip. 

I believe that you need a static identifier for user B such as static ip address for it.