For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Rob_78590's avatar
Rob_78590
Icon for Nimbostratus rankNimbostratus
Aug 25, 2009

iRule for SNAT for Host IPs & Supernets based on specific customer

Hi everyone! We currently have an iRule setup to SNAT to a particular IP depending on which customer it is. We specify the customer's host address in the Data Group List and associate it to our IP tha...
application delivery
dev
devops
iRules
Rob_78590's avatar
Rob_78590
Icon for Nimbostratus rankNimbostratus
Aug 26, 2009
Hi Aaron,

 

 

Wouldn't it be easier to just modify my current iRule by replacing [IP::local_addr] with [IP::addr]? By doing that, my iRule would be as follows:

 

 

when CLIENT_ACCEPTED {

 

 

set syn_snat [findclass [IP::addr] $::my_snat " "]

 

 

if { $syn_snat ne ""} {

 

 

snat $syn_snat

 

 

}

 

 

}

 

 

In my Data Group List called "my_snat", I would specify the various formats that we previously discussed. This should provide the results I need, right?