Forum Discussion
Niles_245942
Nimbostratus
Mar 14, 2016irule to select ASM policy using policy rules
Hi Experts,
This case reflects 11.2.1 -> 11.6.0 HF6 upgrade test. While assessing 11.2.1 configuration, it was identified that 3 irules use HTTP_CLASS_SELECTED method, which create conflicts duri...
Niles_245942
Nimbostratus
Mar 22, 2016Hi Santhalis & Richard, Thanks for your input. I have considered your comments and edited the irule below. I can see http-class profiles have been converted by the big-ip to local policies which includes multiple policy rules. What I am trying to achieve below is that to disable ASM if http uri contains "/Results/StudyTemplate/Save" as below.
when HTTP_CLASS_SELECTED {
ASM::enable
if { [HTTP::path] equals "/Results/StudyTemplate/Save" } {
ASM::disable
}
}
when HTTP_REQUEST {
if { [HTTP::uri] starts_with "/Results/StudyTemplate/Save" } {
ASM::disable
}
HTTP::header insert X-Forwarded-For [IP::remote_addr]
switch -glob [string tolower [HTTP::host]] {
"*recruitment*" {
pool DMZ_WEBv01
return
}
"*recruitmentstage*" {
Define appropriate pool for webserver hosting web site
pool DMZ_WEBv02
return
}
}
}
Please let me know if you have any comments.
Regards, Niles
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects