Forward to VS based on URI? - firepass to APM migration

Question

Hi, we are currently migrating from Firepass to APM, currently we have a load of URI's that people connect to on the firepass and get various policies applied and customisation depending on which one they connect to.
&nbsp;I was wondering if it is possible to use an iRule in APM to forward requests to a VS with a sepecific access policy assosiated with it. I know you can have a uri check in the VPE but I think that the policy could start to get very large if we have say 20 braches coming off the URI check with a separate logon page and resource assign on each (although I guess we could have each branch going to a macro and leep it tidy that way). I think it would be neater to have one access policy per uri.&nbsp;
Does anyone out there do something in a similar way?&nbsp;
Many thanks&nbsp;

john_alam_45640 · Answer

Yes, we do that often.
Use the HTTP_REQUEST event on the front virtual server.
when HTTP_REQUEST {
  switch -glob [HTTP::uri] {
      "abc*" { virtual abc }
      "def*  { virtual def }
      default { HTTP::respond 200 content "You are in the wrong place." }
  }
}

HTH

tedsmith_143757 · Answer

OK thanks, so if I can get this to work, it should save me from using up lots of public IP's, I can have 1 x external IP and people will get the policy they need based in the uri they enter?&nbsp;
I will give it a go Thanks&nbsp;

mike_maher · Answer

What version are you running?  If you are using 11.4.x code, I would wonder if Local Traffic policy might be an option for you?

tedsmith_143757 · Answer

Hi, we are running 11.4.1, I will have a look at local traffic policy if that will achieve the same goal. We will only be buying a license for APM though so not sure how many LTM options we will have? May need to speak to my reseller.

tedsmith_143757 · Answer

John, I have got this to work, however it appears that when I connect to the virtual server with the APM access policy associated it changes to uri to be /my.policy and I get the 'you are in the wrong place message'

Any ideas?

Forum Discussion

Forward to VS based on URI? - firepass to APM migration

6 Replies

Recent Discussions

F5 terminal - help to run commands - disk space full

import live updates from version x to version y

Tenant image upgrade

iRule editor partition button does not work

F5Access | MacOS Sonoma

Related Content

Getting Started with BIG-IP Next: Migrating an Application Workload

F5 BIG-IP per application Red Hat OpenShift cluster migrations

uCS platform-migrate

Edge to Pulse: IP Geolocation Database Migration

Re: Welcome to the F5 BIG-IP Migration Assistant