F5XC service-policy explainer
Paste an F5 Distributed Cloud service_policy and see exactly how it matches: the server scope, the rule order, and every rule's action and conditions. iRules for XC, decoded.
Security & WAF🔒 Decoded locally in your browser. Nothing is sent anywhere, and the policy is never evaluated against live traffic.
The policy is parsed entirely in your browser from the JSON you paste. The engine reads the spec against the published ves.io.schema.service_policy shape: it resolves the server choice and the rule choice, and for a rule_list it walks each rule's action and predicates, rendering every matcher with its exact, regex, prefix, and suffix values and its and/or logic. It never fetches anything and never evaluates the policy against live traffic; case-sensitivity and inversion are read straight from the matcher fields and their transformers.
- F5 Distributed Cloud API: ves.io.schema.service_policyThe service_policy object: server choice, rule choice, allow_list, deny_list, rule_list
- F5 Distributed Cloud API: ves.io.schema.service_policy_ruleThe rule spec: action, predicates, matchers, transformers, and expiration
- F5 Distributed Cloud: Service Policy how-toCreating and applying service policies, rule combining, and default deny
This tool is built from public vendor documentation and may not be fully accurate or current. For production use, always verify against the vendor's official documentation.