iRule to Allow Certain Client IP

Hi,

You can use the iRule datagroup to keep the IP addresses and have your iRule reference the datagroup.

Here is a link to information about datagroups...

https://devcentral.f5.com/articles/-the101-irules-101-datagroups-amp-tables

Seth

you bet. Use a datagroup and then use the class command to extract the pool you want based on source.

ltm data-group internal /Common/iplist {
    records {
        192.168.1.1/32 {
            data my-pool
        }
        192.168.2.0/24 {
            data your-pool
        }
    }
    type ip
}


when HTTP_REQUEST {
  if { ([HTTP::host] contains "my.site.com" } {
    set pool [class match -value -- [IP::client_addr] equals iplist]
    catch { pool $pool }
  } else {
    HTTP::respond 200 content [ifile get AccessDenied]
  }
}

Thanks allot guys - I didn't even think about using datagroups. I'll follow up with my rule after I get it working!

Thanks

Okay, here is what I ended up doing:

when HTTP_REQUEST {
    switch [HTTP::host] {
        "my.site.com" {
            if { [class match [IP::remote_addr] equals MYDATAGROUP] } {
                pool MYPOOL
            } else {
                HTTP::respond 200 content [ifile get AccessDenied]
            }
        }
    }
}

Thanks again for the suggestions!