For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Gullapudi_Venka's avatar
Gullapudi_Venka
Icon for Nimbostratus rankNimbostratus
Jun 30, 2016

Utilization of Data group in an iRule

I am trying to write an iRule that will reject the IP::Client_IP_addr if the HTTP_REQUEST had a certain cookie.   I placed the multiple cookie items in the data group named Cookie_datagroup.   ...
BIG-IP
iRules
security
Vijay_E's avatar
Vijay_E
Icon for Cirrus rankCirrus
Jun 30, 2016

Two options:

when HTTP_REQUEST { 
    if { [class match [HTTP::cookie names] contains Cookie_datagroup] } { 
        reject 
    }
}

Alternate option:

when HTTP_REQUEST {
    if { [HTTP::cookie exists "old-cookie-name"] } {
        reject
    }
}