Forum Discussion

michael_foley_6's avatar
michael_foley_6
Icon for Nimbostratus rankNimbostratus
Mar 24, 2014

Wild Card Virtual Server - multiple source restrictions

Hi Folks

 

Not sure if an article on this is hiding around somewhere. I'm looking at doing some transparent proxying for one of our wireless networks. I'm using WCCP to get the traffic to the F5, and have setup a wildcard Virtual server listening on port 80 to send the traffic down to our proxies.

 

All of this is ok, except I need to be able to restrict the source address that the rule matches on to cover multiple networks that can't be summarised.

 

Is there a way through and iRule that this can be done, I can't see anyway of doing it through the GUI and the tmsh seems to just replace one source with another.

 

APM
application delivery
devops
ihealth
iRules
performance
security
TMSH

2 Replies

Sort By
  • Patrik_Jonsson's avatar
    Patrik_Jonsson
    Icon for MVP rankMVP
    Mar 24, 2014

    Hi!

    Create a datagroup, ie allowed_sources.

    Then create an iRule dropping everything else:

    when HTTP_REQUEST { 

    if { ![class match [IP::client_addr] equals allowed_sources ] } {
        drop
    }
}

    /Patrik

  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    May 03, 2014

    can you try something like this? proxy_ip is ip type data group containing proxy ip address.

    when CLIENT_ACCEPTED {
  if { [class match -- [IP::client_addr] equals proxy_ip] } {
    forward
  }
}
Related Content