F5 Logo MyF5
Search
  1. MyF5 Home
  2. BIG-IP Access Policy Manager: Implementing Zero Trust with Per-Request Policies
  3. Using HTTP Connector to Access External Servers
  4. Creating an HTTP Connector Request for an external IP blocklist
Manual Chapter : Creating an HTTP Connector Request for an external IP blocklist

Applies To:

Show Versions Show Versions

BIG-IP APM

  • 15.1.10, 15.1.9, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.1.0
Manual Chapter

Creating an HTTP Connector Request for an external IP blocklist

You can configure an account with Neutrino API for this example. A free account is sufficient to test the blocklist function.
Use an HTTP Connector Request to check an IP address against the Neutrino API blocked IP list.
  1. On the Main tab, click
    Access
    Authentication
    HTTP Connector
    HTTP Connector Request
    .
  2. In the
    Name
     field, type a name for the HTTP Connector Request.
  3. Select an
    HTTP Connector Transport
    , or click the plus symbol (
    +
    ) to create one.
  4. Type the
    URL
     on which the HTTP Connector Request action will occur.
    For the Neutrino API blocklist, the URL is
    https://neutrinoapi.com/ip-blocklist
    .
  5. In the
    Method
     field, type
    POST
    .
    Neutrino API uses POST; however your external connector may require a different method.
  6. Specify and configure your Authentication type and parameters. For this example, because Neutrino API uses an API key, select
    Custom
     authentication.
  7. In the
    Token
     field, type or paste the API key (api-key) value for the Neutrino API account.
    For example,
    JsV1X4RbfCVmYPerI6324p8Cc9iKD4vbUPwLQHpsd3cO6lup3
    .
  8. In the
    Request Headers
     field, type
    Content-Type: application/x-www-form-urlencoded
    .
    This entry is specific to Neutrino API; other applications may require a different header.
  9. In the
    Request Body
     field, type the request body to send.
    For the Neutrino API blocklist, this should be formatted as
    user-id=
    your-user-id
    &api-key=
    your-api-key(or api-key reference)
    &ip=
    the-IP-to-check-against-the-blocklist
    .
    For example,
    user-id=johndoe&api-key=%{token}&ip=%{perflow.client.ip.address}
    .
    In this example, the variable
    token
     is substituted with the API key from the
    Token
     field, and the variable
    perflow.client.ip.address
     is substituted with the client's IP address.
  10. Set the
    Response Action
     to
    Parse
    .
  11. Click
    Save
    .
The HTTP Connector Request for the Neutrino API blocklist is now configured.
Reference this HTTP Connector Request using the HTTP Connector access policy item in a Per-Request Policy subroutine.
Contact Support Contact Support

Have a Question?

Support and Sales >

About F5

Education

F5 Sites

Support Tasks




©2023 F5, Inc. All rights reserved.


Trademarks Policies Privacy California Privacy Do Not Sell My Personal Information