Forum Discussion

Kai_M__48813's avatar
Kai_M__48813
Icon for Cirrus rankCirrus
Apr 13, 2016

problems with data group and http:host

hi,   i have set up a forward http proxy, using the irule provided in Devcentral(current version 3.2), which works quite well. But due to security demands, i need to limit outgoing requests to onl...
data group list
ends_with
http::host
iRules
LTM
proxy
security
Vernon_97235's avatar
Vernon_97235
Historic F5 Account
Apr 13, 2016

matchclass
is deprecated in favor of class. Can you try the same, but using 
class
as follows:

if { [class match [string tolower [HTTP::host]] ends_with data_group] } { reject }

and see if that makes a difference?

  • Kai_M__48813's avatar
    Kai_M__48813
    Icon for Cirrus rankCirrus
    Apr 13, 2016
    hi.. i have now updated the irule to the following: if { not [class match [string tolower [HTTP::host]] ends_with data_group] } { reject } but this is still not working for requests that also include a subdomain. the request being sent from the server is api..xx/, but this fails. if we open a browser on the server and go straight to https://, it gets through. this indicates that at least some parts of the irule is working, but it fails to send a request through if it is including a subdomain as well...unless im missing something here also, as this is a proxy, it uses 8080.. does this get attached to the host header? if so, it will probably cause issues with "ends_with"