How to Configure Shape Defense Allowlists via iRule Data Tables – F5 Silverline Knowledge Base

Description

An allowlisted visitor is any traffic that is on the trusted allowlist for the application protected by Silverline Shape Defense. No allowlisted visitor is served a Silverline JS client page.
Silverline Shape Defense and Shape Enterprise Defense (SSD and SED) allowlisting is configured via Silverline iRule Data Tables
Allowlisting is most relevant to Web Scraping Protection
There are 2 types of Shape Defense allowlists:
- Source IP Address allowlist
- HTTP Header allowlist
This article has configuration steps for both types of Shape Defense allowlists

Note: Source IP allowlist is processed first, followed by the HTTP Header allowlist

How to Configure

1. In the Silverline Portal, navigate to Config > Proxy/App Configuration > iRule Management
2. Click Add button
3. Create a Data Table named: SHAPE_allowlist_ip of type “IP Profile”
  - Silverline Shape Defense only looks for Data Tables with these specific names.
4. Populate it with the Source IP addresses which should bypass processing by Silverline Shape Defense.

NOTE: This procedure works for both SED and SSD.

Note: Source IP allowlist is processed first, followed by the HTTP Header allowlist
Note: HTTP Header allowlist looks for both the header name and value to be set to perform an allowlist action.

How to Configure

1. Create a Data Table names: SHAPE_allowlist_header of type String
  - Silverline Shape Defense only looks for Data Tables with these specific names.
2. Populate it with the Key set to the HTTP Header name and the Value of the HTTP Header value to be allowlisted