For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Stephen_Carvill's avatar
Stephen_Carvill
Icon for Nimbostratus rankNimbostratus
Nov 29, 2018

irule to source route a request.

I need to route an https request to a pool if the source IP matches a list but redirect to to a different place if the IP does not match. So far I have this but it just hangs. when HTTP_REQUEST {...
application delivery
iRules
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Nov 30, 2018

Your iRule syntax is correct. Are you using an address-type data group for the IPs? You also don't need a value in the data group, just the key.

You may want to add some debug logging here to see what's really happening:

when HTTP_REQUEST {
    if { [class match [IP::client_addr] equals securerpm.ip.list] } {
        log local0. "IP ([IP::client_addr]) matches data group"
        pool securerpm.icgtax.com
    } else {
        log local0. "IP ([IP::client_addr]) does not match data group"
        HTTP::redirect "https://scadmzprx01.lereta.com/securerpm"
    }
}

Then watch from /var/log/ltm:

tail -f /var/log/ltm