Forum Discussion

Allen_Fambro_31's avatar
Allen_Fambro_31
Icon for Nimbostratus rankNimbostratus
Aug 29, 2017

Need an iRule to apply AFM policy to inbound traffic based on node IP

Hello, I have a scenario that I need some help with. We have a VS that uses a policy to route traffic to multiple backend nodes based on HTTP Host used in the request. Is it possible to use an iRule to apply a specific AFM policy to this traffic?? The key here is that I need to be able to apply a whitelist to one backend node and a different whitelist to another, etc...

 

Any assistance is greatly appreciated. Thanks.

 

AFM
iRules
security
  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Aug 30, 2017

    Hi,

     

    You can't assign a AFM policy in an irule, but you can assign another VS with a AFM policy assigned.

     

    another solution about your question is to create a policy assigned to the VS with one rule filtering with whitelist followed by a any source rule and assigning an irule filtering on HOST header.

     

    If the host must be filtered, respond with a blocking web page in the irule.