Forum Discussion
VB_95896
Nimbostratus
NimbostratusSend to httpclass profile
Hello,
I've got an iRule that provides pool selection (fallback node) and I'd like to implement ASM security on HTTP requests and HTTP replies.
One way to do that is to use an HTTP Class Profile with application security enabled.
QUESTION : how to forward the requests from the HTTP Class Profile to the iRule ?
Nota : I think security should be implemented before the selection of the pool.
Here is my iRule :
when HTTP_REQUEST {
if { [active_members pool_1] >= 1 } {
pool pool_1
} else {
pool pool_2
}
}
Regards,
VB
hoolioCirrostratus
If you're not specifying pools on the HTTP class, I think your rule should work fine. You could also consider changing the event to CLIENT_ACCEPTED unless you specifically want to check the pool_1 state on every HTTP request.
If you want to add pools to the HTTP classes you'd need to change the pool selection in the iRule to the HTTP_CLASS_SELECTED event.
The request is still validated by ASM if the request matches the HTTP class filters and ASM is enabled on the class, regardless of when you specify a pool in the iRule.
Aaron