Forum Discussion

Wasfi_Bounni's avatar
Wasfi_Bounni
Icon for Cirrocumulus rankCirrocumulus
Nov 05, 2020
Solved

How can I use an irule to send the client's source IP over HSL without sending everything else?

Hi;   My question is related to the i-rule below. How can I define a HSL publisher with a filter and avoid sending all types of messages associated with that filter so that only a message showing...
application delivery
iRules
LTM
  • PeteWhite's avatar
    PeteWhite
    Nov 09, 2020

    Not too sure quite what you want but you can use the HSL command to create the HSL connection directly instead of going through a publisher: https://clouddocs.f5.com/api/irules/HSL__open.html

    when CLIENT_ACCEPTED {
  set hsl [HSL::open -proto UDP -pool <HSL pool>]
  HSL::send $hsl "Client connect from [IP::client_addr]:[TCP::client_port]"
}
PeteWhite's avatar
PeteWhite
Icon for Employee rankEmployee
Nov 09, 2020

Not too sure quite what you want but you can use the HSL command to create the HSL connection directly instead of going through a publisher: https://clouddocs.f5.com/api/irules/HSL__open.html

when CLIENT_ACCEPTED {
  set hsl [HSL::open -proto UDP -pool <HSL pool>]
  HSL::send $hsl "Client connect from [IP::client_addr]:[TCP::client_port]"
}
Latchezar_Dimov's avatar
Latchezar_Dimov
Icon for Nimbostratus rankNimbostratus
Feb 09, 2022

Hello Pete,

Do I need to add more rows (like below) in order to collect the client IP or your rule do it? Our goal is to send the client IP over HSL for ldap service with SNAT.

example:
when SERVER_CONNECTED {
set client "[IP::client_addr]:[TCP::client_port]"
set snat "[IP::local_addr]:[TCP::local_port]"
set node "[IP::server_addr]:[TCP::server_port]"
}