Forum Discussion

JNeilson_117973's avatar
JNeilson_117973
Icon for Nimbostratus rankNimbostratus
Jan 28, 2015

HTTPS URL inspection

We are trying to inspect a URI to allow two variations of a URL access from the WAN while all others are blocked. The issue is the unique identifier comes at the end of the FQDN, the iRules we have working will only inspect the beginning of the FQDN

 

Full FQDN is https://help.tddirectinvesting.co.uk/system/templates/selfservice/sunburst/!portal/240100000001001

 

We need to have the iRule check for /240100000001001 or /240100000001000 and block all other URIs. However with the iRules we only seem to be able to inspect up to https://help.tddirectinvesting.co.uk/system/

 

The rules we have in place currently is:

 

when HTTP_REQUEST { switch [string tolower [HTTP::uri]] { "/system/templates/selfservice/sunburst/!portal/240100000001001" { Stop processing the iRule for this event here log local0. "Match on 240100000001001" return } "/system/templates/selfservice/sunburst/!portal/240100000001002" { Stop processing the iRule for this event here log local0. "Match on 240100000001002" return } "default" { drop } } }

 

1 Reply

  • Hi,

     

    try to add a log statement, please. I guess there is some url encoding happening preventing the proper matching.

     

    Thanks, Stephan