Domain Based Filtering

[Subrun]

Hello,

is it possible to use F5,  to allow incoming URL’s based on a wildcard? Like *.testforce.com  ?  That means as long as traffic come from testforce.com , F5 will allow that traffic coming to a VIP. I have AFM license at F5.

[Mayur_Sutare]

Hi @Subrun ,
Do you mean to allow traffic coming for specific wildcard domains and rest should be dropped on the F5 VIP? If yes, then its possible using simple iRule also.

[SamCo]

Hello,

It's also feasible using LTM policies if you don't want an irule.

Simply by creating a match with the following conditions:

HTTP Host host ends with .testforce.com

Cheers,

Sam

[Subrun]

Should I say *.testforce.com or .testforce.com  ? in the LTM Policy.

Also from the LTM Policy should that be "Forward Traffic " to Virtual Server Name ?

[Mayur_Sutare]

Hi @Subrun 

The way you are trying to write policy will forward traffic to the specified vServer/pool when request is coming for *.testforce.com. So with such policy, vServer will forward traffic for rest domain requests to default pool if you have it on your vServer. This strategy will be more useful when you want to forward traffic for specific domain to the desired pool/vServer

e.g.

for abc.testforce.com forward traffc to abc-pool

for xyz.testforce.com forward traffc to xyz-pool

Looking at your use case, I would recommend you to write policy to deny ttraffic which is not coming for desired domain e.g. *.testforce.com. This will be more easy to maintain.

And whenever you want to add few more domain into allow list, you can add it in the rule. Ref policy is attached.

Now when traffic will come for the desired domain, vServer will forward it to desired pool based on either default pool or iRule etc, depending upon how are you managing it.

Hope it helps!