Forum Discussion

Ben_9010's avatar
Ben_9010
Icon for Nimbostratus rankNimbostratus
Jan 19, 2017

Modify iRule Table through iControlREST ?

Looking to remotely add/remove IPs to a table blacklist that can be referenced by an iRule. Is it possible to accomplish this through iControlREST ?   Thanks!  
iControlREST
iRules
security
IheartF5_45022's avatar
IheartF5_45022
Icon for Nacreous rankNacreous

Yes you can do that. I've done it before using an external datagroup, and storing the datagroup contents on an external HTTP (or HTTPS) server. Here's the tmsh command;-

tmsh modify /sys file data-group /Common/dg_ip_blacklist separator ":=" source-path http://10.2.3.4:8080/etc/ip_blacklist.txt

That doesn't quite get you there though...use the following guide https://devcentral.f5.com/d/icontrol-rest-user-guide-version-1150 to convert the tmsh command into a REST request that can be sent by a remote server....

IheartF5_45022's avatar
IheartF5_45022
Icon for Nacreous rankNacreous
Jan 20, 2017

OK ok

curl -k -u admin:'blah' -H "Content-Type: application/json" -X PUT -d '{"name":"dg_ip_blacklist","partition":"/Common","source-path": "http://10.2.3.4:8080/etc/ip_blacklist.txt"}' https://10.191.58.180/mgmt/tm/sys/file/data-group/dg_ip_blacklist/?$filter=partition%20eq%20Common