Access Control Based On request

Hello All,

 

 

i tried draw the ropology, i will configure F5 in bridge mode in this topolog;

 

Gprs Router

 

|

 

| |

 

| |

 

| |

 

LTM 6800 -------- Ltm 6800

 

||

 

||

 

||

 

||

 

Cisco Switch----- Cisco switch

 

||

 

||

 

||

 

||

 

Firewall 1 Firewall 2

 

 

Clients will come from behind firewalls and They will pass over F5 units then if F5 see HTTP request he trigger the irule then;

 

 

when HTTP_REQUEST {

 

 

if { ( [matchclass [HTTP::uri] equals $::blockeddb] ) }

 

{

 

discard

 

}

 

 

}

 

 

blockeddb samples (www.xx.com, www.xx.com/xxx)

 

 

question ;

 

1- Do you suggest this topology with this irule

 

2- how many records can be in data group class

 

3- if i want do add some records in class how can i do this automaticly?

 

4- What do you think about cpu usage, do you suggest biggest model? we have 300-400 mbits traffic in this section and i can position bigger model?

 

 

regards

 

 

Zafer