Forum Discussion

Ashu_Aggarwal's avatar
Ashu_Aggarwal
Icon for Cirrus rankCirrus
Sep 18, 2020

Restrict access to VS by ip & time

I have to restrict access to a VS by IP & time. So during a particular window (time/day) only specific ip ranges should be allowed to access that vs. Can someone please guide how to do that on a LTM....
application delivery
iRules
LTM
LiefZimmerman's avatar
LiefZimmerman
Icon for Admin rankAdmin
Nov 03, 2020

 - Can you mark one of these as Best answer? Did you solve the problem in some other way?

  • Ashu_Aggarwal's avatar
    Ashu_Aggarwal
    Icon for Cirrus rankCirrus
    Nov 03, 2020

     No I could not resolve it, The i-rule is not working as expected. It just keep blocking the connection regardless of time. Thanks!

    • JRahm's avatar
      JRahm
      Icon for Admin rankAdmin
      Nov 04, 2020

      Hi Ashu, take a look at this iRule for guidance: https://devcentral.f5.com/s/articles/irule-maintenance-windows.

    • Ashu_Aggarwal's avatar
      Ashu_Aggarwal
      Icon for Cirrus rankCirrus
      Jan 22, 2021

      Hi  ,

       

      Thanks for your response. Where to enter the values for day start_time end_time. Sorry i haven't get this part & bit confusing to me. For example i want to enable the maintenance window every Wednesday at 10:15PM & end at 12:15AM(Thursday).

      Thank You!

    • JRahm's avatar
      JRahm
      Icon for Admin rankAdmin
      Jan 23, 2021

      Give this a shot. 

      when RULE_INIT {
    set static::start_time 221500
    set static::end_time 001459
    set static::days [list "Wednesday" "Thursday"]  
}
when HTTP_REQUEST { 
    scan [clock format [clock seconds] -format {%A %H%M%S}] {%s %s} cur_day cur_time
 
    ### FOR TESTING PURPOSES ONLY ###
    # immediately before the maintenance window
    #scan [clock format [clock scan "Wed Jan 20 22:14:59 CST 2021"] -format {%A %H%M%S}] {%s %s} cur_day cur_time
    # at very beginning of the maintenance window
    #scan [clock format [clock scan "Wed Jan 20 22:15:00 CST 2021"] -format {%A %H%M%S}] {%s %s} cur_day cur_time
    # at the very end of the maintenance window
    #scan [clock format [clock scan "Thu Jan 21 00:14:59 CST 2021"] -format {%A %H%M%S}] {%s %s} cur_day cur_time
    # immediately after the maintenance window
    #scan [clock format [clock scan "Thu Jan 21 00:15:00 CST 2021"] -format {%A %H%M%S}] {%s %s} cur_day cur_time
    ### END TESTING STRINGS ###
 
    if { !(($cur_day eq [lindex $static::days 0]) && ($cur_time >= $static::start_time)) &&
         !(($cur_day eq [lindex $static::days 1]) && ($cur_time <= $static::end_time)) } {
             # NORMAL CONDITION
             HTTP::respond 200 content "Situation: Normal. $cur_day, $cur_time "
    } else {
        # MAINTENANCE CONDITION
        HTTP::respond 200 content "Situation: Maintenance. $cur_day, $cur_time "
    } 
}