iRule to mimic Cisco ACL for Forwarding VIP

Hi Aaron,

 

 

Yes the real server is in the trustedAddresses data group.

 

 

My understanding is very flawed I know, but I was under the assumption that return traffic to the real server via the forwarding VIP would also be validating against the irule.

 

 

Below is how I picture a ping from the real server to google would look like with the irule coming to play on the inside_vlan_210_15_210 VIP when a reply comes back from google - hence why I was puzzled that given that google isn't in the trustedAddresses data group, wouldn't the traffic be dropped?

 

 

real (210.15.210.x) -> F5 (inside_vlan_to_any VIP) -> default gw -> Google

 

 

Google -> F5 (inside_vlan_210_15_210 VIP) -> real

 

 

Thanks.,

 

 

Andy