For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Tony2020's avatar
Tony2020
Icon for Nimbostratus rankNimbostratus
Mar 22, 2017

XFF and efficiently group code/iRule

Hi iRule gurus -   Was wondering if anyone can help me take and consolidate/put together the three code section efficiently. It seems there are too many "if" section just to do the same function. ...
devops
iRules
Vijay_E's avatar
Vijay_E
Icon for Cirrus rankCirrus
Mar 23, 2017

I am not sure about the efficiency level you can achieve but I would recommend considering this untested version:

when HTTP_REQUEST {
    if { [active_members MYPOOL-PORT-443] < 1 } {
        HTTP::redirect "http://maintenance-page.company.com" 
    } else {
    set CHECK_IP [getfield [HTTP::header values X-Forwarded-For] " " 1]

    if { ([class match $CHECK_IP eq "DG-XFF-ALLOWED-IP-LIST"]) } {
        if { [class match [HTTP::uri] eq "DG_RESTRICTED_URI"] } {
                pool MYPOOL-PORT-443
            elseif { [class match [HTTP::uri] eq "/URI1/URI2/PORTAL/ADMIN"] } {
                HTTP::redirect "https://[HTTP::host]/SECRET/URI1/URI2/ADMIN/"
             }
         }
     }
   }
}