Forum Discussion

sandy16's avatar
sandy16
Icon for Altostratus rankAltostratus
Jun 14, 2016

iRule for matching source-ip OR true-client-ip from a datagroup

Hi experts, Need help in writing an iRule that has the following logic - Request is allowed only if the source-ip OR true-client-ip present in the header (if the request comes via a proxy) are par...
iRules
security
Vijay_E's avatar
Vijay_E
Icon for Cirrus rankCirrus
Jun 14, 2016
when HTTP_REQUEST { 
if { ([class match [IP::client_addr] equals Allowed-ips]) or ([class match [HTTP::header "True-Client-IP"] equals Allowed-ips]) } { 
  Do not interfere (Allowed)
} else {
  drop
} 
}

Untested - give it a shot !

Also, you need to replace this 

 Do not interfere (Allowed)
with pool information, if you want the traffic to go to a specific pool.