Forum Discussion
JeffRitze
Nimbostratus
NimbostratusiRule: Log SNAT IP's when using Oneconnect
Hello F5 Friends, I'm at a bit of a loss for how to write an iRule here and I'm hoping you all can help me out. I have a need to send a security vendor the Client Side and Server Side IP addresses...
boneyard
MVP
MVPi dont think there is an easy solution.
do you need oneconnect? disabling it seems like a possible solution.
a workaround would be to store the CS and SS IPs in a table and check against that before logging a new one. have to think about timeout for the entries though.
you can also look at influencing the oneconnect behaviour somehow, perhaps like this
https://clouddocs.f5.com/api/irules/ONECONNECT__label.html
though that feels tricky.