Traffic Policy to map HTTP::class select command?

try:

when HTTP_REQUEST {
    if { [class match [IP::client_addr] equals "disable_asm_ip_ranges"] }{                      
        ASM::enable /Common/cls_EMS_staging_admin
    }
    else {
        ASM::enable /Common/cls_EMS_staging 
    }
}

but I believe, you have to select a security policy at the virtual server, first. Via the security tab.

Hello Torti,

Yes, correct. I have LTM Policy applied on those VS where the above iRule is applied. Also ASM is enabled within the LTM policy.

However I am struggling to make the following working now. 😞

    when RULE_INIT
{
                set static::intranet_groupName "interactive_range" 
}

when HTTP_REQUEST
{
                set flag_classSelect_developer 0
                if {[matchclass [IP::client_addr] equals $static::intranet_groupName]}
                {
                                ASM::disable
                                set flag_classSelect_developer 1
                                HTTP::class select /Common/cls_intranet_noFirewall
                }
}

when HTTP_CLASS_SELECTED
{
                if {$flag_classSelect_developer == 1}
                {
                                HTTP::class select /Common/cls_intranet_noFirewall
                                set theClassName [HTTP::class]
                }

}
}

The HTTP Class associated with the iRule, has nothing except ASM enable. Any idea how can I achieve the same for 11.5.1?

Thank you again. Darshan

I think, you get a problem, if you enable an ASM policy with the irule and with the LTM policy. Normally, I do this all with LTM plicy only, but there is no option to filter for an ip address or address range. Only a vlan filter is possible. Thats a missing feature.

when HTTP_REQUEST {
if { [class match [IP::client_addr] equals "disable_asm_ip_ranges"] }{                      
    ASM::disable
}
else {
    ASM::enable /Common/cls_EMS_staging 
}

}

and don't forget to enable security at the virtual server

Hello Torti,

Yes, I agree that above code will work. However in second post, I have posted a code with HTTP_CLASS_SELECTED event, which doesn't seem to be compatible with 11.5.1.

How can we deal with that? Small part coppied from above iRule which needs to be converted for 11.5.1

when HTTP_CLASS_SELECTED
{
                if {$flag_classSelect_developer == 1}
                {
                                HTTP::class select /Common/cls_intranet_noFirewall
                                set theClassName [HTTP::class]
                }

}
}

Thank you, Darshan

Hello Torti,

Yes, I got the point. I modified the code as following now.

when HTTP_REQUEST
{
                if {[matchclass [IP::client_addr] equals "intranet_groupName"]}
                {
                                ASM::disable
                }
}

And I have applied the LTM Policy with ASM policy. Looks fine now?

Thanks for your help. Much appreciated. Darshan