Destination based redirect irule, a'la cache.pac implementing?

Can you add an HTTP profile to the VIP and test with the example in my first post above? The HTTP profile is required to allow LTM to parse the request as HTTP.

The private_net class referenced in the example is a stock class of addresses defining RFC1918 internal IP's:

b class private_net list

class private_net {

network 10.0.0.0/8

network 172.16.0.0/12

network 192.168.0.0/16

}

If you don't want to parse the HTTP and can instead look at the requested IP address, you could use something like this:

 
 when CLIENT_ACCEPTED { 
  
    if { [matchclass [IP::local_addr] equals $::private_net] } { 
       forward 
    } else { 
       pool live-proxy-pool 
    } 
 } 
 

As this rule doesn't inspect the HTTP headers/data you wouldn't need an HTTP profile on the VIP.

Aaron