Forum Discussion
Dave_Burnett_20
Nimbostratus
NimbostratusRestrict Access to URI based on Source IP
I'm new on the iRule side of things so would appreciate some help.
Is it possible to restrict access to a particular URI on our public website (not the whole of the website) to a range of trusted IP addresses?
What would the iRule look like in this instance.
Thanks
3 Replies
hoolioCirrostratus
Hi Dave,
It's possible, but not effective as the URI check in an iRule can't handle the various obfuscation methods an attacker could use to bypass the validation. If you did try to normalize all the potential obfuscation techniques, you'd probably end up with a resource hog of an iRule.
See this post for details:
http://devcentral.f5.com/Default.aspx?tabid=53&forumid=5&tpage=1&view=topic&postid=3090031324
I should note that you can normalize the URI using an app firewall like ASM or validation on the webservers themselves.
Aaron
cneberg_17010I get access denied when I click on the link you posted (https://devcentral.f5.com/Default.aspx?tabid=53&forumid=5&tpage=1&view=topic&postid=3090031324 ) how do I get access?- hoolioHi,
Sorry, there's an access issue with the old links. Here is a working link:
https://devcentral.f5.com/Community/GroupDetails/tabid/1082223/asg/42/aft/30900/showtab/groupforums/Default.aspx31324
Aaron
