Forum Discussion

hc_andy_35682's avatar
hc_andy_35682
Icon for Nimbostratus rankNimbostratus
Feb 09, 2010

iRule to mimic Cisco ACL for Forwarding VIP

Hi All,     Can somebody please help me write an iRule that will permit/deny the outside world from accessing the real servers behind the F5???     For example I have an inside_v...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Feb 11, 2010
Hi Andy,

 

 

The default action for a forwarding VIP is to forward the connection with the destination IP address untranslated. So you don't need to specify forward in the iRule. You can just drop or reject any connections you don't want to forward.

 

 

If you don't use the forward command on the FastL4 VIP with a default pool configured, the VIP's pool will be used for requests which don't match the iRule logic for dropping/rejecting connections. If there isn't a pool configured the request will be dropped--not forwarded.

 

 

Aaron