Forum Discussion

Jison111's avatar
Jison111
Icon for Nimbostratus rankNimbostratus
Jan 07, 2025

iRule to Force Source IP to Specific Backend Node

Hi everyone,

Hope someone could help me with this kind of setup. We need an iRule to force specific IPs to connect on specific backend server of the VS. Please see flow below.

 

Client (1.1.1.1) when connecting to VS1 traffic should go to Node1

Client (2.2.2.2) when connecting to VS1 traffic should go to Node2

 

I saw this discussion but I think there's something to add? Instead of deny. Thank you so much.

https://community.f5.com/discussions/technicalforum/f5-whitelisting-allowing-a-specific-range-of-traffic-to-vs/195967

application delivery
BIG-IP
irule
  • akonu's avatar
    akonu
    Icon for Moderator rankModerator
    Jan 08, 2025

    Jison111 to force the source IP to a specific Pool member you can use an Irule or an LTM Policy.

    I found some information that could help answer your questions on our myf5 portal, please click on the links below .

    K43431442: Configuring an iRule to select an alternate Pool from the Default Pool based on client IP address.
    https://my.f5.com/manage/s/article/K43431442

    K73862425: Creating external data groups
    https://my.f5.com/manage/s/article/K73862425

    https://clouddocs.f5.com/api/irules/IP__client_addr.html

    I hope this helps.