Forum Discussion

Kai_M__48813's avatar
Kai_M__48813
Icon for Cirrus rankCirrus
Apr 13, 2016

problems with data group and http:host

hi,   i have set up a forward http proxy, using the irule provided in Devcentral(current version 3.2), which works quite well. But due to security demands, i need to limit outgoing requests to onl...
data group list
ends_with
http::host
iRules
LTM
proxy
security
VernonWells's avatar
VernonWells
Icon for Employee rankEmployee
Apr 13, 2016

matchclass
is deprecated in favor of class. Can you try the same, but using 
class
as follows:

if { [class match [string tolower [HTTP::host]] ends_with data_group] } { reject }

and see if that makes a difference?

  • Kai_M__48813's avatar
    Kai_M__48813
    Icon for Cirrus rankCirrus
    Apr 13, 2016
    hi.. i have now updated the irule to the following: if { not [class match [string tolower [HTTP::host]] ends_with data_group] } { reject } but this is still not working for requests that also include a subdomain. the request being sent from the server is api..xx/, but this fails. if we open a browser on the server and go straight to https://, it gets through. this indicates that at least some parts of the irule is working, but it fails to send a request through if it is including a subdomain as well...unless im missing something here also, as this is a proxy, it uses 8080.. does this get attached to the host header? if so, it will probably cause issues with "ends_with"