Forum Discussion
Lior_54855
Nimbostratus
NimbostratusRestrict Post/Put methods
Hi,
I want to give my development team restricted access to the F5 with REST API.
I need to give them only restricted access so they can monitor the status of the pool members.
How can I restric...
Lior_54855Nimbostratus
NimbostratusHi,
Thank you for this link. I know how to do it with ASM or with iRule, but the REST API works on the MGMT interface. Is there a way I can create virtual server and send the REST API requests through this virtual server?
R_MarcSorry, misunderstood your question...I believe that access is handled via an apache instance. You could perhaps modify the /etc/http/http.conf and add in some rewrite rules to block the unwanted methods. That might persist reboots, but would not likely persist upgrades. They don't appear to have included the allowed methods module. However, you would be limiting the capability of the REST API to Read Only, unless you wrote a complicated rule to allow some IP's users to PUT/POST.
