Forum Discussion

Thiyagu_343098's avatar
Thiyagu_343098
Icon for Nimbostratus rankNimbostratus
Feb 28, 2019

Query on irule to disable HTTP methods

Hello All, I'm working on a task to disable specifc http methods which are not required for the application. I would like to follow some best practices for achieving this request.

 

Could you please help me to know the following?

 

1- Is a negative model of irule logic is efficiant or positive model of irule logic is efficiant? 2- what would be the best approach: 2.A creating a data group with the list of methods which needs to be allowed and using the data-group in irule? 2.B only using irule and checking only for specific http methods and allow only that traffic 3- is there any URL using which I can use to generate some put method traffic or post method traffic? 4- Any F5 wiki article to learn more about disabling http methods?

 

Thanks a lot in advance for your help.

 

Regards, Thiyagu

 

application delivery
BIG-IP
iRules

1 Reply

Sort By
  • uzair's avatar
    uzair
    Icon for Nimbostratus rankNimbostratus
    Feb 28, 2019
    1. It depends which list is shorter positive or negative. As per me positive check is better if we know the limitations of application.

    2.A,2.B. Its better to use LTM policy to reject or accept the request. 3. traffic can be generated from any linux machine in local netwrok use httperf.