Forum Discussion
rajeshgoud
Altostratus
AltostratusURI access for all for 4 URIs and rest of the URIs based on IP whitelisting
Hi Everyone,
I have requirement for IP whitelisting for ALL the URIs except for 4 URI. The 4 URIs should be accessible to all
Here is the sample I used but its working for whitelisting but ...
rajeshgoudAltostratus
Altostratus
when HTTP_REQUEST {
if { [string tolower [HTTP::host]] equals "abc.com" } {
Check if requested URI matches for access to all
switch -glob [HTTP::uri] {
"/6110.aspx" -
"/9018.aspx" -
"/9044.aspx" -
"/3001.aspx" {
pool ABC_TEST_V
}
}
} elseif { [string tolower [HTTP::host]] equals "abc.com" } {
if { [class match [IP::client_addr] equals ABC_all] } {
Process the traffic for all IPs for URL abc.com pool ABC_TEST_V
} else {
Drop the connection
drop
}
}
}
when HTTP_RESPONSE {
foreach mycookie [HTTP::cookie names] {
HTTP::cookie secure $mycookie enable
}
}
Are your 'if' and 'elseif' trying to match on the same text? The hostname is in small case, yes the hostname is same for if and elseif statement. I am match 4 URIs if they match I send to the pool else I have to check the IP whitelisted->yes->then goto to pool
dragonflymr
Cirrostratus
CirrostratusOK, but when if condition is matched then elseif will never be triggered.
elseif should just contain different condition that if.
To have anything performed for other URI than specified in your switch you should place your additional conditions in switch default declaration like:
switch xyz {
a
-
b
{format 1}
a*
{format 2}
default
{format 3}
}
Piotr
