iRule : snatpool first or pool member selection first

Basically, if the client source IP address isn't 202.1.1.1 or 202.1.1.2 then snatpool snatpool_normal will be used and the Default Pool assigned to the Virtual Server will be used.

 

 

Because you are doing this in the CLIENT_ACCEPTED event, I don't think the order matters at all.

 

 

To be blunt, don't use member 3.3.3.254 if it's an issue. However, keep in mind the SNAT IP doesn't need to be in the same subnet/network; you just need to ensure the server has a route back to the SNAT address via the F5. You could use 192.168.1.1 if you wanted, as long as the servers and hops inbetween route that IP back to the F5.