Friday, October 11, 2019

F5 iRules syntax example for source, destination ip , port and protocol allow/deny

Hi, can anyone help with syntax for "source ip, destination ip , port and protocol allow/deny " for iRules on an f5 load balancer.

We are trying to remove an checkpoint firewall and use an existing f5 load balancer to do that job and understanding that iRules could be used for that purpose, if someone can help with the syntax it will be very much appreciated!

I have an below example, however i am not sure if i can use the same syntax for defined as port/port pool instead of "HTTP_REQUEST"

when HTTP_REQUEST {

    log local0.debug "IRule has been triggered"

    if { [class match [IP::client_addr] eq xxxxx] } {

      pool xxxxxx_443_pool

       }      

    if { [class match [IP::client_addr] eq ris_mlt_client_net] } {

       pool xxxxx_443_pool

       }

    else {

      pool xxxxxx_443_pool

      }

    }



No comments:

Post a Comment