Forum Discussion

Sumit7595_36869's avatar
Sumit7595_36869
Icon for Nimbostratus rankNimbostratus
Aug 01, 2018

Need help to write an iRule

Hi All,

 

I need help to implement a change in my existing iRule. Main site should be accessible to intended IPs but two pages of this site (example: and should be accessible to everyone)

 

I created one data group list and kept all the intended IPs to access but now i am stuck here and don't know how to allow public access to and

 

Existing iRule: when HTTP_REQUEST priority 50 { if { [HTTP::host] equals "; } { set TCIP 0.0.0.0 set ALLOW 0 if { [HTTP::header exists True-Client-IP] } { set TCIP [HTTP::header True-Client-IP] if { [class match $TCIP equals Data_GroupList_Name] } { set ALLOW 1 } if { $ALLOW } { return } else { HTTP::respond 403 } } } } }

 

application delivery
iRules
iRulesLX
  • Samir_Jha_52506's avatar
    Samir_Jha_52506
    Icon for Noctilucent rankNoctilucent
    Aug 02, 2018

    Based on above condition, tried to frame irule. Validate it & confirm.

       when HTTP_REQUEST  priority 70 { 
         if { ( [string tolower [HTTP::uri]] starts_with "/sumit" ) or ( [string tolower [HTTP::uri]] starts_with "/dubey" ) } { 
            HTTP::redirect "https://[HTTP::host][HTTP::uri]" 
                } 
        elseif { [matchclass [IP::client_addr] equals ADMIN-ALLLOWED-IP-LIST] } {
            HTTP::redirect "https://[HTTP::host][HTTP::uri]" 
            }
    else { 
         HTTP::respond 200 content {
        
            
            Apology Page
     
     
        We are sorry. Permission denied, Connect to Application Admin Team.
            
         
              }
          }
      }
  • JG's avatar
    JG
    Icon for Cumulonimbus rankCumulonimbus
    Aug 02, 2018
    when HTTP_REQUEST priority 50 {
    if { [string tolower [HTTP::host]] equals "www.examples.com" } {
        if { [HTTP::header value "True-Client-IP"] != "" } {
            if { [class match [HTTP::header value "True-Client-IP"] equals Data_GroupList_Name] } {
                return
            } else {
                if { ( [string tolower [HTTP::path]] equals "/sumit" ) or ( [string tolower [HTTP::path]] equals "/dubey" ) } {
                    return
                }
            }
        }
        HTTP::respond 403 content {
                                      
                                      
                                          Access Denied.
                                      
                                      
                                      You do not have permission to access this site.
                                      
                                  } noserver
        event disable all
    }
}