For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

xin_li_90490's avatar
xin_li_90490
Icon for Nimbostratus rankNimbostratus
Jul 11, 2007

how to realized some clients persistence acording to source ip, but their src ip are not in one subnet?

there are 3 groups of clients accessed my telnet vs.   their ip is   group1:10.1.1.1, 192.168.1.1, 172.16.1.1   group2:10.1.1.2, 192.168.1.2, 172.16.1.2   group3:10.1.1.3, 192.168.1.3, 17...
application delivery
dev
devops
iRules
Kirk_Bauer_1018's avatar
Kirk_Bauer_1018
Icon for Altostratus rankAltostratus
Jul 12, 2007
First, one alternative: Instead of having everybody connect to the same VIP, could they possibly connect to three different VIPs (i.e. group1 uses a different VIP than group2 which uses a different one from group3)? If so, you can change your virtual server to listen on a network and use destination address affinity.

 

 

If that won't work then it is certainly possible to write an iRule to do custom persistence and group these IPs together as you want. It would not be trivial to write otherwise I'd whip it up for you. Are you a current or potential customer? Where do you live? Definitely contact your F5 systems engineer for help.