Restrict access to VS by ip & time

Hi Ashu Aggarwal,

Create a datagroup for always allowed IPs.

Try this iRule:

when RULE_INIT {
	array set static::timerange { #change time
		Monday {"08:30" "20:00"}
		Tuesday {"08:30" "20:00"}
		Wednesday {"08:30" "20:00"}
		Thursday {"08:30" "20:00"}
		Friday {"08:30" "20:00"}
		Saturday {}
		Sunday {}
	}
}
 
when HTTP_REQUEST {
	if { not [class match [IP::client_addr] equals dg-allowed-ip-list-name] } { #change dg name
		set now [clock seconds]
		set current_day [clock format $now -format {%A}]
		set start [lindex $static::timerange($current_day) 0]
		set end [lindex $static::timerange($current_day) 1]
		
		if { ($start ne "") && ($end ne "") && ($now >= [clock scan $start]) && ($now < [clock scan $end]) } {
			set denied 0
		} else {
			set denied 1
		}
		
		unset start end
	} else {
		set denied 0
	}
 
	if { $denied } {
		drop
	}
}

Thank You very much i will try asap!

 - Can you mark one of these as Best answer? Did you solve the problem in some other way?

Hi Ashu,

Can you replace lines 20-24? (set denied values)

if { ($start ne "") && ($end ne "") && ($now >= [clock scan $start]) && ($now < [clock scan $end]) } {
	set denied 1
}
else {
	set denied 0
}

when RULE_INIT {
	array set static::timerange {
		Monday {}
		Tuesday {}
		Wednesday {}
		Thursday {"03:15" "03:30"}
		Friday {}
		Saturday {}
		Sunday {}
	}
}
 
when HTTP_REQUEST {
	if { not [class match [IP::client_addr] equals dg_allow_ip_during_deployment] } {
		set now [clock seconds]
		set current_day [clock format $now -format {%A}]
		set start [lindex $static::timerange($current_day) 0]
		set end [lindex $static::timerange($current_day) 1]
		
		if { ($start ne "") && ($end ne "") && ($now >= [clock scan $start]) && ($now < [clock scan $end]) } {
			set denied 1
		} else {
			set denied 0
		}
		
		unset start end
	} else {
		set denied 0
	}
 
	if { $denied } {
		drop
	}
}