For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

prademaker_1989's avatar
prademaker_1989
Icon for Nimbostratus rankNimbostratus
Oct 16, 2017

Restrict LTM from serving up root only page requests

Developer wants us to restrict the F5 from serving up any page when the request is directly to the vip without any file specified. IE if the request is to '' then he wants the F5 to not return anything. Might help to mention that they use host headers on their web server. He is aware that he could accomplish this on the server itself, but he's wanting it done on the F5. How best to accomplish this?

 

iRules
LTM
security

1 Reply

  • CharlesCS's avatar
    CharlesCS
    Icon for Cirrus rankCirrus
    Oct 16, 2017

    The easiest way would be to create an LTM Traffic Policy which checked whether the URI path was exactly equal to "/" (which is always present even if the client didn't specify a path), and resets the traffic if that's true. Then assign the policy to the virtual server(s) as needed.