For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

swo0sh_gt_13163's avatar
swo0sh_gt_13163
Icon for Altostratus rankAltostratus
Feb 25, 2015

Traffic Policy to map HTTP::class select command?

Hello Folks, Sorry, opening another thread similar to the first one I opened today morning. Can anyone help me with Traffic Policies as per the requirement? Basically following is the iRule snippet...
application delivery
devops
iRules
Torti's avatar
Torti
Icon for Cirrus rankCirrus
Feb 26, 2015

I think, you get a problem, if you enable an ASM policy with the irule and with the LTM policy. Normally, I do this all with LTM plicy only, but there is no option to filter for an ip address or address range. Only a vlan filter is possible. Thats a missing feature.

 

Your code looks a little bit to complicated.

 

Try it with my example from above, but set ASM::disable at the ip filter.

 

Like this

 

when HTTP_REQUEST {
if { [class match [IP::client_addr] equals "disable_asm_ip_ranges"] }{                      
    ASM::disable
}
else {
    ASM::enable /Common/cls_EMS_staging 
}

}

 

and don't forget to enable security at the virtual server