Forum Discussion

FlorianM_29948's avatar
FlorianM_29948
Icon for Nimbostratus rankNimbostratus
Nov 27, 2012

Restrict access by uri and ip

Hi everyone i'm new to the F5 community and i'm having troubles with an iRule.     I need to be abble to restrict the access of many uri based on multiple ip addresses who may vary between ea...
application delivery
dev
devops
iRules
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Nov 27, 2012
This reduces it somewhat; 


when HTTP_REQUEST {
 switch -glob [HTTP::uri] {
  "/error*" {
   if { (([class match [IP::client_addr] equals ipgrouptest]) or ([class match [IP::client_addr] equals ipgrouptest2])) } {
    If the client IP match the ipgrouptest/2 class we do nothing
   }
   else { HTTP::respond 403 }
  }
  "/example*" {
   if { (([class match [IP::client_addr] equals ipgrouptest]) or ([class match [IP::client_addr] equals ipgrouptest3])) } {
    If the client IP match the ipgrouptest/3 class we do nothing
   }
   else { HTTP::respond 403 }
  }
 }
}