Forum Discussion
Mark_Givens_877
Nimbostratus
Oct 06, 2005iRule Help
I'm new to working with Big-IP's and creating iRules. I need to create an iRule that will send incoming connections from multiple ports to one port on a server behind the Big-IP. For instance, all incoming connections on ports 6255 through 6265 will be sent to port 6265 on a server.
I assume this is pretty basic but I have no idea how to do it. Any help would be greatly appreciated.
Thx
3 Replies
- unRuleY_95363Historic F5 AccountYou don't even need a rule to do this. Simply create a pool with pool members that only have port 6265. The virtual(s) will automatically translate the port (unless to specifically tell it not to) as it connects to the pool members.
- Mark_Givens_877
Nimbostratus
I'm sorry but I'm still lost. So you're saying that any connection attempt to the virtual IP will automatically be translated to port 6265? Are you sure that is correct?
From what I can tell a virtual IP can only have one port assigned to it. The nodes can have multiple ports. If the VIP has port 6265 assigned to it and someone tries to connect to the VIP via port 6261 the connection will be dropped not translated. Am I right?
Basically, the VIP needs to accept connections from 10 different ports and be translated to one port(VIP - ports 6255 through 6265 while the nodes will only accept 6265) - unRuleY_95363Historic F5 AccountYou will probably want 10 VIP's one for each destination port, eg: 6255, 6256, etc. Then you would create one pool with only pool members on :6265. Then you would assign this same pool to each of your 10 VIPs.
So, a connection would come in to say, 6261 and the virtual listening on :6261 would accept the connection and pick a pool member from the pool with only members on 6265. The virtual would automatically map to the pool members service.
Hope that helps.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
