Forum Discussion
craig_m_254946
Nimbostratus
Mar 17, 2016iRule to restrict TCP and UDP to the same range of ports.
Like the title says, I'm trying to make an iRule to restrict ports to a VS.
I was trying to use the following, but getting an error.
when CLIENT_ACCEPTED {
if {([TCP::local_port] >= 10514 ) ...
Mar 17, 2016
I might do it like this instead as it's easier to read.
when CLIENT_ACCEPTED {
Check which protocol and set the port variable
if { [IP::protocol] == 6 } {
6 means TCP
set port [TCP::local_port]
} elseif { [IP::protocol] == 17 } {
17 means UDP
set port [UDP::local_port]
} else {
Unhandled protocol
set port 0
}
Make sure the ports are between 10514 and 10526 OR 514, the select the pool
if { ($port >= 10514 && $port <= 10526) || $port == 514 } {
pool Pool_Name
} else {
reject
}
}
/Patrik
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects