For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Daniel_Abrahams's avatar
Daniel_Abrahams
Icon for Nimbostratus rankNimbostratus
Feb 18, 2021

Require host header

Hi,   Is there a setting/iRule that makes it so that host header is required for clients to be able to connect to server. For example User enters https://www.test.com he will be able to connec...
BIG-IP Access Policy Manager (APM)
devops
iApps
Mayur_Sutare's avatar
Mayur_Sutare
Icon for MVP rankMVP
Feb 18, 2021

Hello  ,

You can use below iRule to achieve your requirement.

iRule1 - This will allow only www.test.com and rest all will be dropped on the VS.

when HTTP_REQUEST {
 
if {([HTTP::host] contains "www.test.com") 
 
} {
 
        log local0. "Allowed Hostname:[HTTP::host]"
} else {
 
    drop
    log local0. "“Invalid hostname: [HTTP::host]"
}
}

iRule - 2 - This will allow the required given host and will drop request coming for IP.

when HTTP_REQUEST {
 
 
if {([HTTP::host] contains "www.test.com") } {
 
    log local0. "Allowed Hostname:[HTTP::host]"
    
} elseif {([HTTP::host] contains "10.10.10.10") }
{
    drop
    log local0. "“Invalid hostname: [HTTP::host]"
} 
 
}

Additionally both irules will log each request and you can see logged requests under ltm files.

Hope it helps!