flightPATH

The Configure—>flightPATH page allows you to view and update the flightPATH rules on the jetNEXUS ALB-X. The settings are organised in the
following sections:

• Details
  

• Condition

• Evaluation

• Action

• Diagnostics

• Common Uses

• Pre-Built Rules

What is flightPATH?

flightPATH
is a rule engine developed by edgeNEXUS to intelligently manipulate and
route HTTP and HTTPS traffic. It is highly configurable, very powerful
and yet very easy to use.

A flightPATH rule has three components:

What can flightPATH do?

flightPATH can be used to modify Incoming and Outgoing HTTP(s) content and
requests. As well as using simple string matches such as “Starts with”,
“Ends With” etc. For more complete control powerful Perl Compatible
Regular Expressions can be implemented.
In addition, custom variables can be created and used in the Action enabling many different possibilities.

Details

The details section contains
the name and description of all of the flightPATH rules configured on
the ALB-X. As you click on a rule the details of the rule will show in
the section below.

To add a new flightPATH rule click Add New and give your rule a Name and Description then click Update to save this section.

Condition

• New conditions can be added by clicking, Add New button.
• Multiple conditions can be used but ALL must be met for the rule to execute.
• To use an OR you would need to create an additional flightPATH rule.
• Each condition contains three elements and a value or not depending on the condition.

Condition:

Match:

Sense:

Check:

Value:

Example:

• The example below has two conditions and BOTH must be met to carry out the action
• The first is checking that the requested object is an image
• The second is checking for a specific hostname

Evaluation

Adding
a Variable is a very powerful feature that will allow you to extract
data from the request and include this in the actions.
For example you could log a user username or send an email if there is a security problem.

Variable:

Source:

Detail:

Value:

Example 1:

In the example below we have created a variable called ignorestart. It looks at the Path and ignores the first section called finance and use the latter part of the path as the contents of the variable.

This
method allows the use of regular expression groups to create the
variable. The example below only has one group so the value will be the
characters contained within the brackets. IF more than one group is
used in a regular expression the value will be taken from the last
group.

Path                     = /finance/budgets/alpha/1.html
$ignorestart$     = /budgets/alpha/1.html

Action

The action is the task or tasks that are enabled once the condition or conditions have been met.

Action:

Target:

Data:

The list of all the actions are detailed below:

Example:

The
action below will issue a temporary redirect to the browser to a secure
HTTPS Virtual Service. It will use the same hostname, path and querystring as
the request.

Diagnostics

Tick this box to enable a more detailed trace. This will log additional detail to the syslog and should be used for testing and troubleshooting only as it will increase latency and CPU.

Common Uses:

Application Firewall and Security:

• Block unwanted IPs
• Force user to HTTPS for specific (or all) content
• Block or redirect spiders
• Prevent and alert cross site scripting
• Prevent and alert SQL injection
• Hide internal directory structure
• Rewrite cookies
• Secure directory for particular users

Features:

• Redirect users based on path
• Provide Single sign on across multiple systems
• Segment users based on User ID or Cookie
• Add headers for SSL offload
• Language detection
• Rewrite user request
• Fix broken URLs
• Log and Email Alert 404 response codes
• Prevent directory access/ browsing
• Send spiders different content

Pre-Built Rules:

1. HTML Extension:

2. Index.html:

3. Close Folders:

4. Hide CGI-BBIN:

5. Log Spider:

6. Force HTTPS:

7. Media Stream:

8. Swap HTTP to HTTPS:

9. Blank out Credit Cards:

10. Content Expiry:

11. Spoof Server Type:

12. Never Send Errors:

13. Redirect on Language:

14. Google Analytics: