Forum Discussion

Stephen_Carvill's avatar
Stephen_Carvill
Icon for Nimbostratus rankNimbostratus
Nov 29, 2018

irule to source route a request.

I need to route an https request to a pool if the source IP matches a list but redirect to to a different place if the IP does not match. So far I have this but it just hangs.

when HTTP_REQUEST {
  if { [class match [IP::client_addr] equals securerpm.ip.list] } {
    pool securerpm.icgtax.com
  } else {
    HTTP::redirect "https://scadmzprx01.lereta.com/securerpm"
  }
}

securerpm.icgtax.com is the pool the permitted IPs should be allowed to reach

securerpm.ip.list is a list of the permitted IP addresses. Right now it has one address in it:

50.116.0.57:=50.116.0.57

I see there are a lot of threads discussing this issue but -- so far -- none have provided me the magic to make this work.

application delivery
iRules
  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Nov 30, 2018

    Your iRule syntax is correct. Are you using an address-type data group for the IPs? You also don't need a value in the data group, just the key.

    You may want to add some debug logging here to see what's really happening:

    when HTTP_REQUEST {
    if { [class match [IP::client_addr] equals securerpm.ip.list] } {
        log local0. "IP ([IP::client_addr]) matches data group"
        pool securerpm.icgtax.com
    } else {
        log local0. "IP ([IP::client_addr]) does not match data group"
        HTTP::redirect "https://scadmzprx01.lereta.com/securerpm"
    }
}

    Then watch from /var/log/ltm:

    tail -f /var/log/ltm