For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Cindy_127211's avatar
Cindy_127211
Icon for Nimbostratus rankNimbostratus
May 17, 2006

Passing 'default pool' to rule

I have a default pool defined in a virtual server. The virtual server also has a rule that uses the default pool name. Right now, this pool name is hard coded. Is there any way to make a rule that...
application delivery
dev
devops
iRules
Al_Carandang_11's avatar
Al_Carandang_11
Icon for Nimbostratus rankNimbostratus
May 17, 2006
You can create a DataGroup (class) which looks like:

class Pools  {
   "vs_www_sbox_americancentury_com_PROXY acs80sbox"
   "virtual_server2 pool2"
   ...
}
Your iRule will then look like

rule SSLV2_Encrypt_ACS_sbox {
  when HTTP_REQUEST {
    set mypool [findclass [virtual name] $::Pools " "]
    HTTP::header insert "Custom" "amc:443"
    if { ![matchclass [SSL::cipher version] equals $::CipherVersion] and [SSL::cipher bits] > 127 } {
      use pool $mypool
    } elseif { [HTTP::uri] starts_with "/encryptcode/" } {
      pool $mypool 
    } else {
      HTTP::redirect https://[HTTP::host]/encryptcode/encryption_notice.jsp}
    }
  }
}