allow traffic to VS based on the source IP fwded in the http get request

I'd suggest that you go and read the API documentation for the IP command family. The information you need to extract the client IP address for each connection is in there.

You will also likely need to look at the class command documentation to see how to make comparisons against a datagroup, to allow our disallow specific IP addresses or ranges.

I am little confused , just with src ip I can create an irule to all or drop the request.

But looking into the http request getting the src ip. Verify in the data group if the ip is listed allow if not drop the connection.

Can I still achieve this with an irule

I tried with the below irule , but this is not working as throwing me expections and command not valid

when HTTP_REQUEST{ if { [class match [[HTTP::header Client-IP]] eq "datagroup_QA" ] }{ Traffic is allowed. Client IP match found in datagroup_QA return } else { Traffic is dropped. Client IP match not found in datagroup_QA drop } }

If the IP from HTTP header matched the IP listed in datagroup , connection need to be allowed if not it need to be rejected.

Hello sandiksk,

try this irule.

when HTTP_REQUEST {
     Traffic is allowed. Client IP match found in datagroup_QA
    if { [class match [[HTTP::header Client-IP]] eq "datagroup_QA" ] }{
        pool your_web_application_pool
    }
    else {
     Traffic is dropped. Client IP match not found in datagroup_QA
    reject
    }
}

Or you can answer with a HTTP response using HTTP::respond. For example 403 Forbidden. To do so, replace reject with 'HTTP::respond 403' without quotes. Be aware of faked HTTP headers.

If you are looking for a whitelist iRule, then below iRule should work fine. You will need to create a datagroup, "Whitelist_IPs" in below example, with all the source IPs you want to allow access. So all http requests which match URL and source IP from whitelist will be allowed, others will get 403.

when HTTP_REQUEST {
    if { ([matchclass [string tolower [HTTP::host]] equals "www.sample1.com"]) and !([matchclass [IP::remote_addr] equals "Whitelist_IPs"]) } {
    HTTP::respond 403
    }
}