Forum Discussion
How to have a GTM with multiple Listeners where each only replies to specific Wide IPs
Hi,
we have a GTM with multiple Listeners (that are in different Route Domains).
What we currentlly have is:
- User that arrives with DNS request at listener IP 1.1.1.1 is able to resolve aaa.com & bbb.com
- User that arrives with DNS request at listener IP 2.2.2.2 is able to resolve aaa.com & bbb.com
What we would like to do is the following:
- User that arrives with DNS request at listener IP 1.1.1.1 is only able to resolve aaa.com and nothing else
- User that arrives with DNS request at listener IP 2.2.2.2 is only able to resolve bbb.com and nothing else
There is a way to assign Wide IPs to specific Listener IPs only?
Thanks a lot.
Regards,
SANTS boy
3 Replies
- JRahm
Admin
you can use an iRule to do that (assign to the listener, not to the wideIP.) Untested, YMMV.
when DNS_REQUEST { if { ([IP::local_addr] eq "1.1.1.1") and ([DNS::name] ne "aaa.com") } { drop } elseif { ([IP::local_addr] eq "2.2.2.2") and ([DNS::name] ne "bbb.com") } { drop } } - SANTS_boy_18328
Nimbostratus
Thanks a lot Jason! I will test and let you know.
Cheers
SANTS Boy
- SANTS_boy_18328
Nimbostratus
Hi,
as we will need to add lots of resolutions, will this work or all the DNS requests will be dropped? Do I need to put a default statement at the end of each "switch" to allow traffic or without a statement it will do the default behavoir of resolving any DNS request to that Listener?
Thanks a lot.
SANTS boy
when DNS_REQUEST { if { ([IP::local_addr] eq "1.1.1.1") switch [DNS::name] { aaa.com { drop } } } elseif { ([IP::local_addr] eq "2.2.2.2") switch [DNS::name] { bbb.com { drop } } } }
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com