Forum Discussion
Rodney_Newton_7
Nimbostratus
NimbostratusIP Source Routing
I have two autonomous BigIP boxes on two different subnets. Each is deployed in a one-armed configuration where the pool members exist on the same subnet as the BigIP… the servers use the BigIP as their default gateway and pool members for each virtual server can exist on both subnets so to ensure traffic is routed back through the BigIP that received the connection I am SNATting the incoming source address. The problem is with streaming video… I can’t stream unsolicited UDP traffic to a SNAT address so is there a way through iRules that I can inject source routing into the IP packet to make sure it comes back through the BigIP that started the connection? If this is possible I can then maintain the client IP but the return traffic will not, necessarily, go to the servers default gateway. Any help is greatly appreciated.
- JRahm
Admin
I'm still shaky as to how the tmm and the linux kernel interact where routing is concerned, but you can try the iproute package native to the linux kernel:
ip route add / dev src
make sure you have a route configured in the bigip.conf file. Note that this will not be supported by F5. I'm doing this for radius system authentication traffic that for some reason is being sourced by an interface other than the one traffic is leaving on. 
Brian_Gupta_115Question, why do you need the traffic to return through the BigIP?
I ask because BigIP supports a feature that allows you to preserve the client source address, and allows the return UDP traffic to flow straight to the requesting client.
(This requires setting the VIP IP on the loopback interface of the server in question).
Cheers,
Brian
