Simple Http Redirect.. double 'IF' statement

Question

Dear Central..&nbsp;
&nbsp;I am very new to Irules and really could use some assistance with one that I am working on.. again very new so I do apologize in advance if this is very basic.&nbsp;
&nbsp;1) Client request will come in via HTTPs with uri = xxx
&nbsp;2) AND if they belong to proper range within 'test' redirect to external webserver
&nbsp;3) everyone else with uri = xxx is to use default_pool..&nbsp;
&nbsp;when HTTP_REQUEST {
&nbsp;      if [HTTP::uri] starts_with  $::/xxx } {
&nbsp;          if { [matchclass [IP::client_addr] equals $::test] } {
&nbsp;                      HTTP::redirect "http://xxx.why.not.net/[HTTP::uri]"
&nbsp;    } elseif [HTTP::uri] starts_with  $::/pfs } {
&nbsp;       pool default_pool
&nbsp;}
&nbsp;}&nbsp;
&nbsp;Thank you in advance.
&nbsp;ms.

deb_allen_18 · Answer

This iRule will redirect only clients in that IP class list who request URI's in that specific path.  All other requests (those from other IP addresses or for other URI paths) will go to the default pool:when HTTP_REQUEST {
  if {([matchclass [IP::client_addr] equals $::test]) &amp;&amp; \
   ([string tolower [HTTP::uri]] starts_with "/xxx")}{
      HTTP::redirect "http://xxx.why.not.net[HTTP::uri]"
  } else {
    pool myPool
  }
}
For this rule to work, you'll need to define a class called "test" of type Address that contains the IP addresses/subnets for which you want to redirect, and the pool myPool must also be defined.
HTH
/deb

malcom_sargla_6 · Answer

Dear Deb;&nbsp;
&nbsp;Thank you very much for information.  Unfortunately  though I cannot seem to get this working though.  When connecting via HTTPS I get prompted for the SSL cert but don't actually make it to the destination.&nbsp;
&nbsp;1) https://pfs.swlab.xxx.net/images/1011k.bmp - no dice
&nbsp;however&nbsp;
&nbsp;2) When I go direct the website displays the proper image: http://dev-otasl04.bisb.swlab.xxx.net/images/1011k.bmp&nbsp;&nbsp;
&nbsp;when HTTP_REQUEST {
&nbsp;  if {([matchclass [IP::client_addr] equals $::xxxx_test]) &amp;&amp; \
&nbsp;   ([string tolower [HTTP::uri]] starts_with "/pfs")}{
&nbsp;      HTTP::redirect "http://dev-otasl04.xxx.swlab.xxx.net[HTTP::uri]"
&nbsp;  } else {
&nbsp;    pool WTLPERF-updates_8100
&nbsp;  }
&nbsp;}&nbsp;&nbsp;

dennypayne · Answer

That's because "pfs" in your example is part of the host, not the URI.  So you need:&nbsp;
&nbsp;([string tolower [HTTP::host]] starts_with "pfs")}{&nbsp;
&nbsp;Denny&nbsp;

dennypayne · Answer

EDIT: oops, removed the slash before pfs

malcom_sargla_6 · Answer

Hello Deb, Dennypayne;
&nbsp;Thank you for all your assistance with this irule.. works great.    Though I do have a couple of questions I was hoping to get some guidance on.  If I use ' string tolower' this will lower all incoming url's to lower case, correct?  If yes, then this must add some processing overhead to the system.   Could I simply remove 'string tolower' and leave the rest of the iRULE intact?  Thank you in advance.&nbsp;
&nbsp;when HTTP_REQUEST {
&nbsp;if {([matchclass [IP::client_addr] equals $::xxxx_test]) &amp;&amp; \
&nbsp;([string tolower [HTTP::uri]] starts_with "/pfs")}{
&nbsp;HTTP::redirect "http://dev-otasl04.xxx.swlab.xxx.net[HTTP::uri]"
&nbsp;} else {
&nbsp;pool WTLPERF-updates_8100
&nbsp;}
&nbsp;}

Forum Discussion

Simple Http Redirect.. double 'IF' statement

6 Replies

Recent Discussions

Chrome V 124+ on MacOS - Virtual Server Access Issue

vulnerabilities (CVE-2020-36363), CVE-2016-0736,CVE-2019-6593-FOR VERSION BIGIP LTM-16.1.4

Port Group on F5OS network setting

Advise on setting up IRULE

F5 iRule to replace host to path

Related Content

Simple Sideband - iRule sideband the easy way

simple redirect irule based off ip

APM AdAuth HTTP Header Insert iRule Switch Statement

Simple iRulesLX JSON rewrite

Simple HTTP Authentication server