For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Thornid's avatar
Thornid
Icon for Nimbostratus rankNimbostratus
Jul 01, 2019

Restrict Source IPs iRule

Hi all   Forgive what may be such an easy iRule question but unfortunately my experience with them is rather limited and time is of the essence. We have an iRule which looks to be doing something w...
application delivery
iRules
LTM
iaine's avatar
iaine
Icon for Nacreous rankNacreous
Jul 01, 2019

Hi

 

To stop processing the iRule further, you can either use Event disable command or you can use a variable to stop specific events or part of code from running depending on requirements. Such as...

 

when CLIENT_ACCEPTED {     
  if { [IP::addr [IP::client_addr] equals 10.10.10.0/24] } {
     SSL::profile new_clientssl
	set sourceip 1 
 }
}
 
when CLIENTSSL_CLIENTCERT {
	if {[info exists sourceip]}{
		return}
		
	}

this uses return to stop this particular event