Technical Articles
F5 SMEs share good practice.
cancel
Showing results for 
Search instead for 
Did you mean: 
Custom Alert Banner
ltwagnon
Legacy Employee
Legacy Employee

For some web applications, you need a separate network firewall policy for users from different geographic locations.  You might want to open specific ports for users from one country and block those same ports for users from another country.  Using the power of iRules and VIP-targeting-VIP solutions, you can dynamically select an AFM policy based on source IP address geolocation.  This Lightboard Lessons discusses the details of it all.  Enjoy!  



Related Resources:

Comments
dragonflymr
Cirrostratus
Cirrostratus

Hi John,

 

As usual very nice video. Wonder if there is any noticeable performance hit when traffic is processed by two VS and two policies in compare to create whole policy on single VS?

 

Piotr

 

ltwagnon
Legacy Employee
Legacy Employee

Great question Piotr! I haven't had a chance to do the performance testing on this solution, but I hope to get to that soon. For this initial solution, I wanted to show the feasibility of doing this, and then I can look to tune it for efficiency as a next step. Thanks!

 

dragonflymr
Cirrostratus
Cirrostratus

Hi,

 

Sorry for messing around, I am as always curious creature :-), and of course thanks for willingness to solve my puzzles.

 

Piotr

 

Version history
Last update:
‎13-Sep-2017 03:00
Updated by:
Contributors