Forum Discussion
Disable specific interface via iControl?
Hi
Can we disable specific interface via iControl?
ie when F5 failover. (status change from Active to standby , ) I want monitoring tool to send icontrol command to disable some interface on F5 standby unit. we have problem with BGP peering which router still peer with standby unit so I need to disable that Interface.
Kridsana
1 Reply
Hi TJ01,
You can use [HTTP::header host] or [HTTP::host]
when HTTP_REQUEST { if { [HTTP::host] equals "10.11.12.13" } { log local0. "request dropped - Host: [HTTP::host] ClientIP: [IP::client_addr]" drop } }
For access only with host "abc.example.com"
when HTTP_REQUEST { if { [HTTP::host] ne "abc.example.com" } { log local0. "request dropped - Host: [HTTP::host] ClientIP: [IP::client_addr]" drop } }
- TJ01
Nimbostratus
Thanks Enes -- Appreciate your help on this ...
if we choose to use code to allow the host with "abc.example.com" only .. will that include the header of "www. abc.example.com" or need to explicitly add it what that "and" statement would be ?
Hi TJ01,
It will not contain "www.abc.example.com". If want to match with www:
when HTTP_REQUEST { if { [HTTP::host] ne "abc.example.com" && [HTTP::host] ne "www.abc.example.com" } { log local0. "request dropped - Host: [HTTP::host] ClientIP: [IP::client_addr]" drop return } }
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com