For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

wkirk's avatar
wkirk
Icon for Nimbostratus rankNimbostratus
Jan 26, 2018

Using wildcard for multiple URI

We have an existing iRule and datagroup, when HTTP_REQUEST { set uri [HTTP::uri] if {[class match $uri starts_with DG1]} { pool POOL_SSL } if {[class match $uri eq DG_EXACT] or $uri eq "/"...
application delivery
BIG-IP
iRules
jaikumar_f5's avatar
jaikumar_f5
Icon for Noctilucent rankNoctilucent
Jan 26, 2018

If your intention is to allow every URI of a particular domain, why do you put wildcard of /* rather than just whitelisting the particular domain itself.

So you need not worry of adding thousands of URI, but just allow that particular host.

when HTTP_REQUEST {
if { [HTTP::host] contains "domain.com" }
{ pool POOL_SSL }
else 
{ drop }
}