Forum Discussion

pratik_srivastava's avatar
pratik_srivastava
Icon for Nimbostratus rankNimbostratus
Apr 24, 2024
Solved

Geo Fence in ASM through irule for URI

I have ASM with Geo fence enabled where I added multiple country as denied but I want to add one URI from only one country rest all should denied for that uri /CKYC*. Apart from this uri all other uri should work as added geo fence.

 

tried below irule but its not working.

 

when HTTP_REQUEST {

        if { [string tolower [HTTP::uri]] starts_with "/CKYC*" && [whereis [IP::client_addr] country] ne "IN" } {
           drop }
}

application delivery
irule
security
  • Juergen_Mang's avatar
    Juergen_Mang
    Apr 24, 2024

    You should really not use iRules that you not understand, but anyway:

    when HTTP_REQUEST priority 500 {
  if { ([string tolower [HTTP::path]] starts_with "/ckyc/") && ([whereis [IP::client_addr] country] ne "IN") } {
    drop
  }
}

     

5 Replies

Sort By
  • Juergen_Mang's avatar
    Juergen_Mang
    Icon for MVP rankMVP
    Apr 24, 2024

    You force the HTTP::uri to be lower case and try to match with a upper case string, that can not work.

     

  • Juergen_Mang's avatar
    Juergen_Mang
    Icon for MVP rankMVP
    Apr 24, 2024

    You should really not use iRules that you not understand, but anyway:

    when HTTP_REQUEST priority 500 {
  if { ([string tolower [HTTP::path]] starts_with "/ckyc/") && ([whereis [IP::client_addr] country] ne "IN") } {
    drop
  }
}