For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Rob_78590's avatar
Rob_78590
Icon for Nimbostratus rankNimbostratus
Aug 25, 2009

iRule for SNAT for Host IPs & Supernets based on specific customer

Hi everyone! We currently have an iRule setup to SNAT to a particular IP depending on which customer it is. We specify the customer's host address in the Data Group List and associate it to our IP tha...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Aug 26, 2009
Hi Rob,

 

 

Yep, I expect host entries specified with a /32 mask would work fine. Though just specifying the IP address should work too with IP::addr. The class could use either the first or second line's format:

 

 

Subnet | SNAT IP

 

1.1.1.1/32 2.2.2.2

 

1.1.1.1 2.2.2.2

 

3.3.3.0/24 4.4.4.4

 

 

The example I posted doesn't actually SNAT the connection, but you can add that in using 'snat [lindex $line 1]' after the log statement. If you are able to test this please reply back with the results. We can then add this as an example to the IP::addr wiki page and/or the codeshare.

 

 

Thanks,

 

Aaron