Manual Chapter : Creating an HTTP Connector Request for an external IP blocklist

Applies To:

  • BIG-IP APM

    21.0.0, 17.5.1, 17.5.0, 17.1.3, 17.1.2, 17.1.1, 17.1.0, 17.0.0, 16.1.6, 16.1.5, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 15.1.10, 15.1.9

Creating an HTTP Connector Request for an external IP blocklist

You can configure an account with Neutrino API for this example. A free account is sufficient to test the blocklist function.

Use an HTTP Connector Request to check an IP address against the Neutrino API blocked IP list.

  1. On the Main tab, click Access > Authentication > HTTP Connector > HTTP Connector Request.

  2. In the Name field, type a name for the HTTP Connector Request.

  3. Select an HTTP Connector Transport, or click the plus symbol (+) to create one.

  4. Type the URL on which the HTTP Connector Request action will occur.

    For the Neutrino API blocklist, the URL is https://neutrinoapi.com/ip-blocklist.

  5. In the Method field, type POST.

    Neutrino API uses POST; however your external connector may require a different method.

  6. Specify and configure your Authentication type and parameters. For this example, because Neutrino API uses an API key, select Custom authentication.

  7. In the Token field, type or paste the API key (api-key) value for the Neutrino API account.

    For example, JsV1X4RbfCVmYPerI6324p8Cc9iKD4vbUPwLQHpsd3cO6lup3.

  8. In the Request Headers field, type Content-Type: application/x-www-form-urlencoded.

    This entry is specific to Neutrino API; other applications may require a different header.

  9. In the Request Body field, type the request body to send.

    For the Neutrino API blocklist, this should be formatted as user-id=*your-user-id*&api-key=*your-api-key\(or api-key reference\)*&ip=*the-IP-to-check-against-the-blocklist*.

    For example, user-id=johndoe&api-key=%{token}&ip=%{perflow.client.ip.address}.

    Note: In this example, the variable token is substituted with the API key from the Token field, and the variable perflow.client.ip.address is substituted with the client’s IP address.

  10. Set the Response Action to Parse.

  11. Click Save.

The HTTP Connector Request for the Neutrino API blocklist is now configured.

Reference this HTTP Connector Request using the HTTP Connector access policy item in a Per-Request Policy subroutine.