Forming a 'tunnel' between F5 pairs...

For TCP, you can do this with something like this....

 

On client side vip

 

- snat to LTM address

 

- point to pool which contains remote side LTM vip as a member (or use node command)

 

- iRule to insert src/dst IP/port at beginning of TCP payload

 

- serverside ssl

 

 

On server side vip

 

- clientside ssl

 

- irule to extract original src/dst IP/port and remove it from beginning of TCP payload

 

- use src IP/port information from previous step with snat command, use dst IP/port with node command

 

 

For UDP, you probably can do as well but without ssl. (other encryption may work)