iRule to SNAT Server

If you have a spare IP address per client you will be SNAT'ing, you could create a datagroup (type: string) with the client IP and SNAT IP. When a client request is received, you could search the class using findclass and look up the corresponding IP you want to SNAT with. You can then use the snat command to apply it.

citizen_elah added a good example using a similar scenario a while back (Click here).

You could adapt that like this using a class with the client IP first, followed by the IP you want to translate it to:

class snat_map {
  "1.1.1.1 1.1.2.1"
  "1.1.1.2 1.1.2.2"
  "1.1.1.3 1.1.2.3"
  "........ ......"
}

And then a rule which performs the SNATing:

when CLIENT_ACCEPTED {
   set snat_ip [findclass [IP::client_addr] $::snat_map " "]
   if { $snat_ip ne "" } {
      snat $snat_ip
   } else {
       client IP wasn't found in the class, so use a default SNAT address
      snat 2.2.2.2
   }
}

Aaron