Forum Discussion
mark_beynon_593
Nimbostratus
Apr 16, 2008More efficient stream iRule
I am very new to iRules, so be patient but have an interesting problem to overcome.
Note all access is via HTTPS:
requirement: remove external access to robots.txt file and an admi...
Eduardo_Saito_1
Nimbostratus
Apr 16, 2008Hi.
You are right. HTTP Profile would break Citrix.
Who is terminating the SSL connection? Are you using SSL Offload?
I guess you could create an iRule to search for robots.txt inside the payload. If robots.txt is inside the payload you can drop the request.
This solution will not require HTTP Profile but be careful about CPU overhead.
I didn't test this iRule.
when CLIENT_ACCEPTED {
TCP::collect
}
when CLIENT_DATA {
if { [TCP::payload] contains "robots.txt" } {
Close TCP Conn
TCP::close
}
TCP::release
TCP::collect
}Good luck!
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
