URI client IP redirect

Question

I am new to this group and irules so bare with me here.  What I have is a site whos owners want a redirect to happen based on client ip range, and URI.  &nbsp;
&nbsp;Example of what I have so far:&nbsp;&nbsp;&nbsp;
when HTTP_REQUEST{ &nbsp;
&nbsp;log local. "Client: [IP::client_addr]"&nbsp;
&nbsp;if { [HTTP::uri] starts_with "URI" }{&nbsp;
&nbsp;   if { [IP::addr [IP::client_addr] equals X.X.X.X/X] } { 
&nbsp;    pool blah        } &nbsp;&nbsp;
&nbsp;    elseif { [IP::addr [IP::client_addr] equals X.X.X.X] } { 
&nbsp;      pool blah        } &nbsp;
&nbsp;}
&nbsp;}&nbsp;&nbsp;&nbsp;
This doesnt appear to work and was hoping someone could give me some pointers on getting this accomplished.&nbsp;&nbsp;&nbsp;

&nbsp;

&nbsp; &nbsp;

hooleylist · Answer

That looks about right.  I assume URI is a liternal URI like /path/to/file?  Can you add debug logging for the two different pool statements to see if either are being hit? 
&nbsp;  
&nbsp; Aaron

jholmes_39917 · Answer

[undefined procedure: elseif] [elseif  { [IP::addr [IP::client_addr] equals XXXX] } {   Havent gotten a chance to debug it.  I get this error when trying to save it through the IRule editor.

jholmes_39917 · Answer

[undefined procedure: elseif] [elseif  { [IP::addr [IP::client_addr] equals XXXX] } {   Havent gotten a chance to debug it.  I get this error when trying to save it through the IRule editor.

hooleylist · Answer

I'd guess you have a space issue with the elseif clause.  Can you try this? 
 when HTTP_REQUEST {

log local. "Client: [IP::client_addr]"
if { [HTTP::uri] starts_with "/some_uri" }{
if { [IP::addr [IP::client_addr] equals X.X.X.X/X] } {
pool blah
log local. "[IP::client_addr]: Matched first check"
} elseif { [IP::addr [IP::client_addr] equals X.X.X.X] } {
pool blah
log local. "[IP::client_addr]: Matched second check"
} else {
reject
}
}
}
 
 Aaron

jholmes_39917 · Answer

Ok that appears to load successfully and logs my IP correctly.  The problem I have is the criteria above should only be allowed to the site.  My IP still reaches the backend IP addresses and can see the content.  Is there something I can use that will stop that from happening?

Forum Discussion

URI client IP redirect

10 Replies

Recent Discussions

Chrome V 124+ on MacOS - Virtual Server Access Issue

F5Access | MacOS Sonoma

Transaction looks successful but file not downloading

Overwriting or adding LTM SSL Traffic cert and key using iControlREST

F5 Access Guard Deprecated: ZTA APM

Related Content

Hide uri on client side

IRULE - redirect URI

Need to redirect complete URL into redirected uri

Capture part of URI and do not redirect.

URL/URI rewrite without changing in Client browser