Forum Discussion
Hamish
Cirrocumulus
CirrocumulusForming a 'tunnel' between F5 pairs...
I have an idea... Well... It's a possible solution for an interesting challenge I have.
Is it possible for an iRule to ALTER an IP field (e.g. srcIP/port) in a packet before tra...
Nat_Thirasuttakorn
Employee
EmployeeFor TCP, you can do this with something like this....
On client side vip
- snat to LTM address
- point to pool which contains remote side LTM vip as a member (or use node command)
- iRule to insert src/dst IP/port at beginning of TCP payload
- serverside ssl
On server side vip
- clientside ssl
- irule to extract original src/dst IP/port and remove it from beginning of TCP payload
- use src IP/port information from previous step with snat command, use dst IP/port with node command
For UDP, you probably can do as well but without ssl. (other encryption may work)
