Forum Discussion

rajeshgoud's avatar
rajeshgoud
Icon for Altostratus rankAltostratus
Jun 08, 2017

URI access for all for 4 URIs and rest of the URIs based on IP whitelisting

Hi Everyone,   I have requirement for IP whitelisting for ALL the URIs except for 4 URI. The 4 URIs should be accessible to all   Here is the sample I used but its working for whitelisting but ...
application delivery
big-ip
rajeshgoud's avatar
rajeshgoud
Icon for Altostratus rankAltostratus
Jun 08, 2017

 

when HTTP_REQUEST {
    if { [string tolower [HTTP::host]] equals "abc.com" } {
         Check if requested URI matches for access to all
        switch -glob [HTTP::uri] {
            "/6110.aspx" -
            "/9018.aspx" -
            "/9044.aspx" -
            "/3001.aspx" {
                pool ABC_TEST_V
            }
        }
    } elseif { [string tolower [HTTP::host]] equals "abc.com" } {
        if { [class match [IP::client_addr] equals ABC_all] } {
             Process the traffic for all IPs for URL abc.com pool ABC_TEST_V
        } else {
             Drop the connection
            drop
        }
    }
}

when HTTP_RESPONSE {
    foreach mycookie [HTTP::cookie names] {
        HTTP::cookie secure $mycookie enable
    }
}

 

Are your 'if' and 'elseif' trying to match on the same text? The hostname is in small case, yes the hostname is same for if and elseif statement. I am match 4 URIs if they match I send to the pool else I have to check the IP whitelisted->yes->then goto to pool

dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
Jun 08, 2017

OK, but when if condition is matched then elseif will never be triggered.

elseif should just contain different condition that if.

To have anything performed for other URI than specified in your switch you should place your additional conditions in switch default declaration like:

 

switch xyz {
      a
             -
      b
             {format 1}
      a*
             {format 2}
      default
             {format 3}
}

 

Piotr