Need help in adding Datagroup to existing Irule

Question

Hi Team , &nbsp;I have below Irule which currently works for specific single source IP 10.10.10.1 ...I would like to add more IP using Datagroup , Could you please help me modify this irule .&nbsp;I tried but I got error "variable reference required proceeding $"&nbsp;Note : We have route domain configured and VIP is configured in route domain %70 .&nbsp;Thanks in Advance :) &nbsp;&nbsp;&nbsp;when HTTP_REQUEST {if {&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;([IP::client_addr] contains "10.10.10.1%70") &amp;&amp; ([string tolower [HTTP::uri]] contains "/cklauncher/")&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; {&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;drop}&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;elseif { [string tolower [HTTP::path]] equals "/" &amp;&amp; ( [IP::addr [IP::client_addr] equals 10.10.10.1%70]) } {# redirect the requestlog local0. "issuing redirect request to [HTTP::host][HTTP::uri] from [IP::client_addr]"HTTP::redirect https://[getfield [HTTP::host] ":" 1]/ckpartner/}}&nbsp;

cjunior · Accepted Answer

Hi,Any chances to same client IP address appears on different route domains on this iRule? Because I think IP data group won't consider route domains on validation, but I'm not 100% sure. This way, I think working on data group type ip route domain number wold be noise optional.ltm data-group internal dg_my_ip_list {
    records {
        10.10.10.1%70/32 { }
    }
    type ip
}
&nbsp;
when HTTP_REQUEST {
    if { [class match [IP::client_addr] equals dg_my_ip_list] } {
        if { [string tolower [HTTP::path]] equals "/cklauncher/" } {
            drop
        } elseif { [HTTP::path] equals "/" } {
            # redirect the request
            log local0. "issuing redirect request to [HTTP::host][HTTP::uri] from [IP::client_addr]"
            HTTP::redirect https://[getfield [HTTP::host] ":" 1]/ckpartner/
        }
    }
}
&nbsp;I hope it helps.Best regards.

blue_whale · Answer

Hi Cjunior, &nbsp;I need help here . &nbsp;With Datagroup I want to block access to both the uri's  /cklauncher/  and /ckpartener/  and anything else should be accessible .

cjunior · Answer

Hello,Changing this part, will that work for you?if { [string tolower [HTTP::path]] equals "/cklauncher/" or [string tolower [HTTP::path]] equals "/ckpartener/" } {
            dropRegards

blue_whale · Answer

I will try this , Thank you &nbsp;&nbsp;&nbsp;ltm data-group internal dg_my_ip_list {&nbsp;&nbsp;records {&nbsp;&nbsp;&nbsp;&nbsp;10.10.10.1%70/32 { }&nbsp;&nbsp;}&nbsp;&nbsp;type ip}&nbsp;when HTTP_REQUEST {&nbsp;&nbsp;if { [class match [IP::client_addr] equals dg_my_ip_list] } {if { [string tolower [HTTP::path]] equals "/cklauncher/" or [string tolower [HTTP::path]] equals "/ckpartener/" } {&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;drop}}}

Forum Discussion

Need help in adding Datagroup to existing Irule

4 Replies

Recent Discussions

[ASM] - what is "Browser Challange file" ?

Rewrite uri translation not working

no available managed rule groups for Israel il-central-1

About shun list for L7 DDoS?

CONNECTION IS LOST DUE TO SELF IP IS DELIVERED

Related Content

CSV to Address External Datagroup File

Modifying multiple entries in a datagroup via api?

Help me! About datagroup

Getting Started with BIG-IP Next: Adding Instances to Central Manager

import data from excel into datagroup