Forward request to IP contained in request header.

Question

Customer is trying to avoid opening a bunch of firewall requests. They want to add a header (ex. DEST: 10.x.x.x) in the request that contains the real destination IP. When the VIP receives the request an iRule will grab that IP and forward the request to that IP. Is this possible? Anyone want to take a crack at it?

riverfish · Answer

We pieced this together. Hopefully it will work...when HTTP_REQUEST {
if { [HTTP::header exists "DEST-IP"] } {
    set DEST-IP [HTTP::header "DEST-IP"]
    log local0. "HTTP request DEST-IP: $DEST-IP"
    node $DEST-IP 443
} else {
    log local0. "No DEST-IP header found"
    drop
    return
}

Forum Discussion

Forward request to IP contained in request header.

1 Reply

Recent Discussions

ASM attack signatures not syncing between active and standby F5

Hardware BIG-IP appliance reach EOSS, but the software version running on it not yet?

VPN Communication Error with F5 BIG-IP Edge Client

simultaneous disabling / enabling of all LTM objects

Query on source IP preservation for syslog traffic through F5 virtual server

Related Content

F5OS restarting container services through REST API

F5 Container Ingress Services (CIS) deployment using Cilium CNI and static routes

F5 partners with Chainguard to offer NGINX Plus in security-hardened containers

Knowledge sharing: Containers, Kubernetes, Openshift, F5 Container Connector, NGINX Ingress

F5 Container Ingress Services (CIS) and using k8s traffic policies to send traffic directly to pods