Forum Discussion

Muhammad_Irfan1's avatar
Muhammad_Irfan1
Icon for Cirrus rankCirrus
Mar 03, 2015
Solved

Packet filter can't filter proxypass is there any other way to filter traffic?

I have VS 10.50.171.8:443 and 35 pools are attached to it through proxypass iRule. iRule is like this for one pool when HTTP_REQUEST { switch -glob [HTTP::uri] { "/300MEFPOSTPAIDLive*" { ...
application delivery
BIG-IP Access Policy Manager (APM)
devops
iRules
security
  • shaggy_121467's avatar
    shaggy_121467
    Mar 03, 2015

    Try inserting an if statement checking for the client's address:

    when HTTP_REQUEST {
  switch -glob  [HTTP::uri] {
    "/300MEFPOSTPAIDLive*" {
      if { [IP::addr [IP::client_addr] equals 10.50.241.155] } {
        pool Tibco-LB-Group3
        HTTP::uri [string range [HTTP::uri] [string first "/" [HTTP::uri] 1] end]
      } else {
        drop
  }
 }
}

    Look at https://devcentral.f5.com/wiki/iRules.IP__addr.ashx for more information/examples

shaggy_121467's avatar
shaggy_121467
Icon for Cumulonimbus rankCumulonimbus

Try inserting an if statement checking for the client's address:

when HTTP_REQUEST {
  switch -glob  [HTTP::uri] {
    "/300MEFPOSTPAIDLive*" {
      if { [IP::addr [IP::client_addr] equals 10.50.241.155] } {
        pool Tibco-LB-Group3
        HTTP::uri [string range [HTTP::uri] [string first "/" [HTTP::uri] 1] end]
      } else {
        drop
  }
 }
}

Look at https://devcentral.f5.com/wiki/iRules.IP__addr.ashx for more information/examples

Muhammad_Irfan1's avatar
Muhammad_Irfan1
Icon for Cirrus rankCirrus
Mar 03, 2015
Thanks shaggy you solved by problem. How would it look like if i want to allow 2, 3 IP,s Do i have to put else if statement then?