Forum Discussion
Drew_Berendts_2
Altostratus
Oct 17, 2005Outbound SNAT w/ IRules
I am new to IRules so please pardon any obviously ignorant part of the inquery. I know that IRules can be used on inbound connections coming into a virtual server. What I would like to do do, however,...
JRahm
Admin
Oct 18, 2005Yes, this is possible. You can also forward outbound traffic based on a particular source, I use this for return traffic in a firewall matrix. In your case, your servers are the clients, so this rule should work for you.
when CLIENT_ACCEPTED {
if { [IP::addr [IP::local_addr] equals "A.A.A.A"] } {
use snat Z.Z.Z.Z
} elsif { [IP::addr [IP::local_addr] equals "B.B.B.B"] } {
use snat Y.Y.Y.Y
} else { use snat X.X.X.X }
}Note that you can use a mask if it is a network destination, like this:
"A.A.A.A/24"
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects