For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JD1's avatar
JD1
Icon for Altostratus rankAltostratus
Jul 19, 2019
Solved

Is it possibe to update entries on an iRule data-group from an iRule

Scenario is, I'm using GFA in APM with irule data-groups as the look up source for the GFA secret keys per user.   However, I'd like to allow users to enroll but I'm unsure if I can allow update ...
  • Dario_Garrido's avatar
    Jul 19, 2019

    Hello.

     

    iRules are executed in data plane scope and to modify data-groups is part of the control-plane scope.

     

    It's not the best choice to run control-plane tasks from a data-plane because of the performance (many data-plane tasks could be executing at the same time as only one control-plane task).

     

    That said, you can trigger an iCall from an iRule to modify the data-group configuration. Some examples:

    https://devcentral.f5.com/s/articles/icall-triggers-invalidating-cache-from-irules

    https://devcentral.f5.com/s/question/0D51T00006i7cO2/execute-icall-from-irule

     

    KR,

    Dario.