For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

meena_60183's avatar
meena_60183
Icon for Nimbostratus rankNimbostratus
Dec 05, 2008

iRule to modify the client IP to Virtual Server IP

Hi All,     I quickly need some help in coming up with an iRule to convert the client IP address to a virtual server address so that the server sees the source as VS.     for exa...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Dec 05, 2008
Are you trying to have the server respond back directly to the client? If so, it should work if without the SNAT. You'd want the server to get a connection from the BIG-IP with the client's IP as the source (no SNAT) and the destination IP being the VIP (destination address translation disabled). You'd define the VIP address on the server's loopback interface so that the server would reply back directly to the client using the VIP address. In the BIG-IP world, this is called nPath routing:

 

 

Configuring nPath Routing

 

https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm_sol_guide_943/sol_npath.html

 

 

I'm not sure why this would solve the issue you're seeing with network printing, but it sounds like what you did with the CSS.

 

 

Aaron