User Manual

ProxySG Content Policy Language Guide
122
request.x_header.header_name.address=
Tests if the specified request header can be parsed as an IP address; otherwise, false. If parsing
succeeds, then the IP address extracted from the header is tested against the specified IP address. The
expression can include an IP address or subnet, or the label of a subnet definition block. This condition
is intended for use with custom headers other than
X-Forwarded-For and Client-IP headers; for
these, use
request.header.header_name.address= so that typing any errors can be caught at
compile time.
Replaces:
request_x_header.header_name.address=
Syntax
request.x_header.header_name.address= ip_address|subnet|subnet_label
where:
•
header_name—Any HTTP header, including custom headers.
•
ip_address—IP address; for example, 10.1.198.0.
•
subnet—A subnet mask; for example, 10.1.198.0/24.
•
subnet_label—Label of a subnet definition block that binds a number of IP addresses or subnets.
Layer and Transaction Notes
•Use in
<Cache> and <Proxy> layers.
Examples
; deny access if the request’s custom header “Local” has the value 10.1.198.0
deny request.x_header.Local.address=10.1.198.0
See Also
•Actions:
append( ), delete( ), delete_matching( ), rewrite( ), set( )
• Conditions:
request.header.header_name=, request.header.header_name.address=,
response.x_header.header_name=
• Definitions: define subnet