For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

wfaulk_98141's avatar
wfaulk_98141
Icon for Altostratus rankAltostratus
Mar 28, 2014

Get information about Self-IPs in iRule

I have a need for an iRule that enables SNAT if the client and server addresses are in the same subnet. In practice, this only happens if the client and server addresses are on directly connected su...
application delivery
devops
iRules
LTM
Mohamed_Lrhazi's avatar
Mohamed_Lrhazi
Icon for Altocumulus rankAltocumulus
Mar 28, 2014

You probably dont need to know the selfip, it is the same subnet as the server right?

when LB_SELECTED {
    set ClientIP [clientside {IP::remote_addr}]
    set VirtualIP [clientside {IP::local_addr}]
    set NodeIP [LB::server addr]
    if { [IP::addr $ClientIP/24 equals $NodeIP/24] } {
        if { $static::debug != 0 } {
            log local0. "SNAT Client: $ClientIP to VIP: $VirtualIP targeting Node: $NodeIP"
        }
        snat $VirtualIP
    }
}