Forum Discussion

Jim_Bo's avatar
Jim_Bo
Icon for Nimbostratus rankNimbostratus
Aug 18, 2020

iRule to selectively allow limited access by client IP

I have an application which is internet accessible but the application team has asked me to limit access to specific URIs based upon client ip. I just cannot seem to get the logic right.   I am ...
allow
Enes_Afsin_Al's avatar
Enes_Afsin_Al
Icon for MVP rankMVP
Aug 18, 2020

Hi Jim_Bo,

Can you try this?

when HTTP_REQUEST {
	if { [class match [IP::client_addr] equals private_net] } {
		# allow access
	}
	elseif { [class match [HTTP::uri] equals allowed-uri-list] } {
		# allow access
	}
	else {
		HTTP::respond 404 content "404 Not Found"
	}
}

or

when HTTP_REQUEST {
	if { not ([class match [IP::client_addr] equals private_net] || [class match [HTTP::uri] equals allowed-uri-list]) } {
		HTTP::respond 404 content "404 Not Found"
	}
}