For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JeffRitze's avatar
JeffRitze
Icon for Nimbostratus rankNimbostratus
Feb 19, 2021

iRule: Log SNAT IP's when using Oneconnect

Hello F5 Friends, I'm at a bit of a loss for how to write an iRule here and I'm hoping you all can help me out. I have a need to send a security vendor the Client Side and Server Side IP addresses...
BIG-IP
devops
iRules
oneconnect
snat
boneyard's avatar
boneyard
Icon for MVP rankMVP
Feb 27, 2021

i dont think there is an easy solution.

 

do you need oneconnect? disabling it seems like a possible solution.

 

a workaround would be to store the CS and SS IPs in a table and check against that before logging a new one. have to think about timeout for the entries though.

 

you can also look at influencing the oneconnect behaviour somehow, perhaps like this

 

https://clouddocs.f5.com/api/irules/ONECONNECT__label.html

 

though that feels tricky.