For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ben_9010's avatar
Ben_9010
Icon for Nimbostratus rankNimbostratus
Jan 19, 2017

Modify iRule Table through iControlREST ?

Looking to remotely add/remove IPs to a table blacklist that can be referenced by an iRule. Is it possible to accomplish this through iControlREST ?   Thanks!  
iControlREST
iRules
security
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Jan 27, 2017

Hi Ben,

you can't change 

[table]
data via REST. But you can add/remove data-group entries via REST and then access the data-group via iRules.

To add/remove entries via REST into/from a data-group without applying the entire data-group again, you can deploy some TMSH helper scripts on your box and call those scripts via REST while passing the required parameters.

To get an idea how this could be implemented, you may take a look to the post below. It explains how a data-group can be changed within an iRule by using a combo of iRule->SIDEBAND Connection->REST API->TMSH Script->Data-Group. Simply skip the iRule->SIDEBAND part and you should have a working solution within minutes...

https://devcentral.f5.com/questions/write-into-internal-data-group-from-irule-50597

Cheers, Kai