Forum Discussion

Karthickkarunak's avatar
Karthickkarunak
Icon for Nimbostratus rankNimbostratus
Mar 13, 2020

Help required to know how to configure irule for below scenario

 

When users sourced from IPs (FqDn "outlook.office365.com") hits below 2 URLs the traffic should be redirected to pool "abc.yyy.com443" , if users sourced from out of that FqDn range hitting these URLs should be dropped or not allowed.

 

https://abc.yyy.com/

https://abc.yyy.com/owa

 

When any users hits below URLs the traffic should be redirected to pool "abc.yyy.com443"

 

https://abc.yyy.com/mapi

https://abc.yyy.com/ebc

https://abc.yyy.com/eap

 

Pool: "abc.yyy.com443"

 

This is very urgent need help to configure this

1 Reply

    1. If you want to allow access to specific source IP addresses/subnet, the most secure way is to do it using IP filter rules/ASM. You can alternately do this with an iRule and data group. Create an address-based data group (ex.allowed_IPs) and add the allowed IPs/subnets in it.

     

    when CLIENT_ACCEPTED {

    if { not ( [class match [IP::client_addr] equals allowed_IPs] ) } {

    reject

    }

    }

     

    2. If your url 'abc.yyy.com' is same then you can directly bind pool "abc.yyy.com443" to VS associated with this URL. So all requests hitting to given URL (irrespective of URI part), request will go to same pool.

     

    Hope it helps you!

     

    Mayur