Access to VIP by irule for matching a header value OR allowing ips using data-group

Hello,

Depending on your VIP preference. The below irule will drop the traffic if neither value matches. If there is a match it will go to the default pool assigned to the VIP. If you need both values to match change or to and.

when HTTP_REQUEST {
    Check if http_header contains hex code or the client IP is not in the allow list
    if { !(([HTTP::header "name_of_header"] equals "3196E8D30330CA17238FAS013036") or ([class match [IP::client_addr] equals WHITELIST]))} {
    if neither value matches drop traffic
       drop
    }
}

thanks, so I have done this (added the pool default and else for drop) but it gives me some errors in the GUI -

when HTTP_REQUEST { Check if http_header contains hex code or the client IP is not in the allow list if { !([HTTP::header "name_of_header"] equals "3196E8D30330CA17238FAS013036" or [class match [IP::client_addr] equals WHITELIST])} { pool default else { if neither value matches drop traffic drop } }

ok, the error i get is: [invalid option "else" must be: member][else] what am i doing wrong?

ok, i found the issue. the else statement needs to be in the same line as the close bracket. Valid format: } else { drop

Invalid format: else { drop