Forum Discussion

Tony_Small_1352's avatar
Tony_Small_1352
Icon for Nimbostratus rankNimbostratus
Feb 13, 2017

Need assitance creating an iRule to inclusively restrict access to a URL

We have an application that has multiple portals with client access controlled at the application layer. We would like to segment our population based on internet vs intranet. I'd like to restrict ac...
application delivery
iRules
security
Snl's avatar
Snl
Icon for Cirrostratus rankCirrostratus
Feb 15, 2017

use this a sample irule

 

1)Create Data group list as allowed-host and added the IP x.x.x.x/32

 

2) created below irule and called the data group list allowed-host

 

use string as equal or contain based on uri requirement

 

Code 

when HTTP_REQUEST {
 if { ( [string tolower [HTTP::uri]]  ends_with "/web/svc.html" ) } {
                 if { not ( [class match [IP::client_addr] equals allowed-host] )
                  } 
                 {
                           reject        }           }       }