* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com

* Podcasts
* Social Channels
* Video Streaming

 

 

 

 

 

ABOUT DEVCENTRAL

DevCentral News Technical Forum Technical Articles Technical CrowdSRC Community Guidelines DevCentral EULA Get a Developer Lab License Become a DevCentral MVP

RESOURCES

Product Documentation White Papers Glossary Customer Stories Webinars Free Online Courses F5 Certification LearnF5 Training

SUPPORT

Manage Subscriptions Professional Services Professional Services Create a Service Request Software Downloads Support Portal

PARTNERS

Find a Reseller Partner Technology Alliances Become an F5 Partner Login to Partner Central

---

©2024 F5, Inc. All rights reserved.

Hi Community,

I am a beginner in F5 and would like your help in achieving the following

would like to restrict the traffic to only to the following path(s)

http://hostname.mylab.com/dir1

http://hostname.mylab.com/dir2

http://hostname.mylab.com/dir3

http://hostname.mylab.com/dir4

Could you please tell me if the following IRule will work if not please help me in configuring this.

when HTTP_REQUEST {

if { (([HTTP::host] eq \"hostname.mylab.com\") and ([HTTP::path] eq \"/dir1\"))

or (([HTTP::host] eq \"hostname.mylab.com\") and ([HTTP::path] eq \"/dir2\"))

or (([HTTP::host] eq \"hostname.mylab.com\") and ([HTTP::path] eq \"/dir3\"))

or (([HTTP::host] eq \"hostname.mylab.com\") and ([HTTP::path] eq \"/dir4\")) } {

} else {

drop

}

}

I really appreciate your help and support in this

Kind Regards,

Hi Community,

I am a beginner in F5 and would like your help in achieving the following

would like to restrict the traffic to only to the following path(s)

http://hostname.mylab.com/dir1

http://hostname.mylab.com/dir2

http://hostname.mylab.com/dir3

http://hostname.mylab.com/dir4

Could you please tell me if the following IRule will work if not please help me in configuring this.

when HTTP_REQUEST {

if { (([HTTP::host] eq \"hostname.mylab.com\") and ([HTTP::path] eq \"/dir1\"))

or (([HTTP::host] eq \"hostname.mylab.com\") and ([HTTP::path] eq \"/dir2\"))

or (([HTTP::host] eq \"hostname.mylab.com\") and ([HTTP::path] eq \"/dir3\"))

or (([HTTP::host] eq \"hostname.mylab.com\") and ([HTTP::path] eq \"/dir4\")) } {

} else {

drop

}

}

I really appreciate your help and support in this

Kind Regards,

The F5 Certification is excited to announce that all five of the NEW F5 Certified BIG-IP Administrator Certification (F5 CAB) exams are now live and available to schedule via the new Education Services Portal.

The F5 Academy Roadshow is rolling into 19 cities (plus two virtual stops), and if you work with apps, APIs, or infrastructure, this event was built for you.

when HTTP_REQUEST {\n    if { [HTTP::host] == \"hostname.mylab.com\" } {\n        switch -- [HTTP::path] {\n            \"/dir1\" -\n            \"/dir2\" -\n            \"/dir3\" -\n            \"/dir4\" -\n            default { drop }\n        }\n    } else {\n        drop\n    }\n}

Thanks Pete for the reply and your time, really appreciate it.

I have tried your solution but it doesn't seem to work,

I implemented the following which went fine.

when HTTP_REQUEST {

if { (([HTTP::host] eq \"hostname.mylab.com\") and ([HTTP::uri] contains \"/dir1\"))

or (([HTTP::host] eq \"hostname.mylab.com\") and ([HTTP::uri] contains \"/dir2\"))

or (([HTTP::host] eq \"hostname.mylab.com\") and ([HTTP::uri] contains \"/dir3\"))

or (([HTTP::host] eq \"hostname.mylab.com\") and ([HTTP::uri] contains \"/dir4\")) } {

} else {

drop

}

}

Kind Regards,

Cool. I can see what i did wrong:

when HTTP_REQUEST {\n    if { [HTTP::host] == \"hostname.mylab.com\" } {\n        switch -- [HTTP::path] {\n            \"/dir1\" -\n            \"/dir2\" -\n            \"/dir3\" -\n            \"/dir4\" { return }\n            default { drop }\n        }\n    } else {\n        drop\n    }\n}

otherwise, you can implement yours a bit differently:

when HTTP_REQUEST {\n  set urls { \"/dir1*\" \"/dir2*\" \"/dir3*\" }\n  if { (! [HTTP::host] eq \"hostname.mylab.com\") or ( ! [lsearch -glob -- $urls [HTTP::path]) } { \n    drop\n  }\n}

or if the number of URLs is likely to be a large number ( 20+ ) then you can put them into a datagroup and match against that.

You can also implement this in an LTM policy which would be more performant.

When testing this sort of thing it is a good idea with a range of tests for different urls and formats to check it works as expected, it is easy to find a corner case.