Forum Discussion

Blue_whale's avatar
Blue_whale
Icon for Cirrocumulus rankCirrocumulus
Jan 23, 2020

Redirect the request from specific IP to URI

Hi Team ,   we have 2 different applications hosted on the server , that can be accessed through 2 URI : /ckpartner /cklauncher   On f5 we want to redirect all requests coming from specific IP ...
application delivery
BIG-IP
iRules
MW1's avatar
MW1
Icon for Cirrus rankCirrus

Not sure if I am quite following what you are after on the cklauncher section as called out below the second section will block any request to the /cklauncher

when HTTP_REQUEST {
#if the request is not to /ckpartner and from the specfied ip or subnet 
if { ![string tolower [HTTP::uri]] starts_with  "/ckpartner" && ( [IP::addr [IP::client_addr] eq 1.1.1.0/255.255.255.0]) } { 
      # redirect the request 
      log local0. "issuing redirect request to [HTTP::host][HTTP::uri] from [IP::client_addr]"
	  HTTP::redirect https://[getfield [HTTP::host] ":" 1]/ckpartner
      }
	
# if the request is to /cklauncher block the request
if  { [string tolower [HTTP::uri]] starts_with  "/cklauncher" } {
     # block the request -- though this will block anything external or internal hitting the URI are you sure this is what you want?
	 log local0. "blocking request  to [HTTP::host][HTTP::uri] from [IP::client_addr]"
	 reject
	 }
}
Blue_whale's avatar
Blue_whale
Icon for Cirrocumulus rankCirrocumulus
Jan 29, 2020

Thanks for your help ,

 

My requirement is currently working with below Irule but I would like to add Datagroup to below Irule so that I can filter more external IP's

Could you please help me modify this irule .

I tried but I got error "variable reference required preeciding $"

 

 

 

when HTTP_REQUEST {

if {

                 ([IP::client_addr] contains "10.10.10.1%70") && ([string tolower [HTTP::uri]] contains "/cklauncher/")

                                  }

                                               {

                drop

}                                                             

elseif { [string tolower [HTTP::path]] equals "/" && ( [IP::addr [IP::client_addr] equals 10.10.10.1%70]) } {

# redirect the request

log local0. "issuing redirect request to [HTTP::host][HTTP::uri] from [IP::client_addr]"

HTTP::redirect https://[getfield [HTTP::host] ":" 1]/ckpartner/

}

}