For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

sonu_kumar4's avatar
sonu_kumar4
Icon for Altostratus rankAltostratus
Jul 05, 2016

Specific URL redirection and other redirection should be unavailable

Hello Guys, Your urgent suggestion required on below case which I got recently to implement in production and as long as I know it could be done through i-rules but its’ TCL script and in which I don’t have much idea so it will be very glad to see some solution on this from your side 

 

Requirement:- If anyone call an external URL www.abcd.com that should be redirect to specific path like/def/geh/100 (full path then backend server (I have done this) but if any one call same external URL with manual trail path like / desd/pqr/100/bsd etc then no redirection at all and there should be some message page that “webpage not available etc “ In short only the following URL should be redirect - /def/geh/100 and rest all redirection should be blocked or unavailable.

 

Thanks, Sonu kumar

 

iRules
security

4 Replies

    • sonu_kumar4's avatar
      sonu_kumar4
      Icon for Altostratus rankAltostratus
      Jul 05, 2016
      Hi Lain, Thanks for reply :) As I checked you have mentioned that when HTTP_Request { if { HTTP::URI equals "/def/geh/100" } mean (as long as I understand) if in the http request URI equal to this path then move to this backedn server rest all set to the given URL right but in my case user is just typing the simple url www.abcd.com in his/her browser that's it and further redirection /def/geh/100 should be done on F5 then backend server also any other URL should not be allowed with same URL. Please correct me if I'm wrong.
    • IainThomson85_1's avatar
      IainThomson85_1
      Icon for Cumulonimbus rankCumulonimbus
      Jul 06, 2016
      Odaah has posted an iRule below that iincludes the host element. :)
  • Vijay_E's avatar
    Vijay_E
    Icon for Cirrus rankCirrus
    Jul 05, 2016

    Try the following with iFile:

    when HTTP_REQUEST {
 if { ([HTTP::host] eq "www.abcd.com") and ([HTTP::uri] eq "/")} {
 HTTP::uri [HTTP::uri]/def/geh/100
 pool POOL_WEB_SERVERS
} else {
 HTTP::respond 200 content [ifile get "maint_index_html"] Cache-Control No-Cache Pragma No-Cache
}
}

    A simpler version:

     when HTTP_REQUEST {
 if { ([HTTP::host] eq "www.abcd.com") and ([HTTP::uri] eq "/")} {
 HTTP::uri [HTTP::uri]/def/geh/100
 pool POOL_WEB_SERVERS
 log local0. "New URI - [HTTP::uri] - [LB::server pool]"
} else {
 HTTP::respond 301 Location "http://redirectpage.com" Cache-Control No-Cache Pragma No-Cache
}
}