Forum Discussion

toshi_01_132399's avatar
toshi_01_132399
Icon for Nimbostratus rankNimbostratus
Aug 30, 2013

mysql ip access control

I would like to do the ip access control by using a irule. However, I failed in the following way. pool-allowhost-01 have kept some mysql. when CLIENT_ACCEPTED { if { [IP::addr [IP::remote_a...
application delivery
devops
iRules
toshi_01_132399's avatar
toshi_01_132399
Icon for Nimbostratus rankNimbostratus
Aug 31, 2013

Thank you Kevin Stewart and nittas. I have also tried the above method already, but the result did not change.

my environment is following

client(192.168.1.30)   ----->    bigip and iRule(172.20.1.262:3306)
                                       pool-allowhost-01  -----> 192.168.1.50:3306
                    -----> 192.168.1.51:3306                                                                  
    -----> 192.168.1.52:3306

I guess that It must add the address of the VIP? 

when CLIENT_ACCEPTED { 
    if { not ( [IP::addr [IP::client_addr] equals 192.168.1.0/24] ) and not ( [IP::addr [IP::client_addr] equals 172.20.1.262] )} { 
   reject 
   } 
}