Forum Discussion

Nimbostratus

Aug 30, 2016

Update packet filter rule from icall

My Use Case: We have a proxy client installed on our laptops that performs a captive portal test before it will initiate a connection with a proxy server within it's list. The test tries to reach ou...

application delivery

BIG-IP Access Policy Manager (APM)

MVP

Aug 30, 2016

Hi Ryan,

you could try the iRule below...

when CLIENT_ACCEPTED {
    ACCESS::restrict_irule_events disable
}
when HTTP_REQUEST {
    if { [HTTP::uri] starts_with "/myvpn?sess=" } then {
        ISTATS::set "VPN_Client_Is_Connecting" 1
    }
}

... in combination with an

ISTATS

based iCall trigger ...

https://devcentral.f5.com/articles/icall-triggers-invalidating-cache-from-irules

Note: Keep in mind, that the iRule event should implement certain request limiters, so that just every few seconds the iCall script can be launched (e.g. setting/checking a