Forum Discussion

Cirrus

Mar 03, 2015

Packet filter can't filter proxypass is there any other way to filter traffic?

I have VS 10.50.171.8:443 and 35 pools are attached to it through proxypass iRule. iRule is like this for one pool when HTTP_REQUEST { switch -glob [HTTP::uri] { "/300MEFPOSTPAIDLive*" { ...

application delivery

BIG-IP Access Policy Manager (APM)

Mar 03, 2015

Try inserting an if statement checking for the client's address:

when HTTP_REQUEST {
  switch -glob  [HTTP::uri] {
    "/300MEFPOSTPAIDLive*" {
      if { [IP::addr [IP::client_addr] equals 10.50.241.155] } {
        pool Tibco-LB-Group3
        HTTP::uri [string range [HTTP::uri] [string first "/" [HTTP::uri] 1] end]
      } else {
        drop
  }
 }
}

Look at https://devcentral.f5.com/wiki/iRules.IP__addr.ashx for more information/examples

shaggy_121467

Cumulonimbus

Try inserting an if statement checking for the client's address:

when HTTP_REQUEST {
  switch -glob  [HTTP::uri] {
    "/300MEFPOSTPAIDLive*" {
      if { [IP::addr [IP::client_addr] equals 10.50.241.155] } {
        pool Tibco-LB-Group3
        HTTP::uri [string range [HTTP::uri] [string first "/" [HTTP::uri] 1] end]
      } else {
        drop
  }
 }
}

Look at https://devcentral.f5.com/wiki/iRules.IP__addr.ashx for more information/examples

Muhammad_Irfan1

Cirrus

Mar 03, 2015

Thanks shaggy you solved by problem. How would it look like if i want to allow 2, 3 IP,s Do i have to put else if statement then?