Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

nanselmo_108951's avatar
nanselmo_108951
Icon for Nimbostratus rankNimbostratus
Dec 17, 2012

Need help with a SNAT iRule

So I have an iRule which will effectively SNAT everything to the VIP address, but I need to modify it to ONLY SNAT traffic where the source subnet is the same as the destination subnet. Any help here...
application delivery
dev
devops
irules
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Dec 17, 2012
I don't see any easy way of doing this but if all the networks are /24's perhaps you could compare the first three octets of client address to the virtual address using [IP::addr [IP::local_addr]. Unfortunately I don't have the skills (yet) to knock something up but I'm sure someone could help out.