For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

benniehanas_239's avatar
benniehanas_239
Icon for Nimbostratus rankNimbostratus
Aug 01, 2016

1 VIP accepts on "0" and passes to 3 different pools based on dest port

Hello all,   I need to create a VIP which takes in all traffic on all ports, then an iRule sends 80,443 to one pool, 3120 to another pool, 3121 to another pool, and drops all remaining traffic. I...
application delivery
iRules
tcp port
tcp ports
VernonWells's avatar
VernonWells
Icon for Employee rankEmployee
Aug 02, 2016

Why don't you simply create four different Virtual Servers, all using the same IP, but different ports? If you don't use SNAT on the VSs, then the client will see the original client IP (naturally, they must have a route back to the client, which traverses the BIG-IP -- unless you're using direct server return).

 

  • IainThomson85_1's avatar
    IainThomson85_1
    Icon for Cumulonimbus rankCumulonimbus
    Aug 02, 2016

    As Vernon mentions - Creating 4 VIPS (if your list of 4 ports is exhaustive) would be the far simplest implementation.

     

    If you're stuck on the True-Client-IP variable, there's plenty of articles on Dev Central.

     

    Just do a quick search

     

  • benniehanas_239's avatar
    benniehanas_239
    Icon for Nimbostratus rankNimbostratus
    Aug 02, 2016

    The issue here is that the traffic is generated by Akamai IP, they also send True-Client-IP. The True-Client-IP is what I need to pass to the backend servers. I can just create 3 VS instead of just one, but wanted my config to be cleaner and less cluttered. Do you think it is still best to create 3?