F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

JL_45517's avatar
JL_45517
Icon for Nimbostratus rankNimbostratus
Mar 11, 2010

Port redirect

I know it's been done before. I've looked around and can't find an answer to what I'm trying to do: VIP listening on port 80, and a pool with nodes listening on 8080.     Here's my situat...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Mar 12, 2010
The VIP:80 pointing to pool member(s) on port 8080 should work fine as long as you have (destination) port and (destination) address translation enabled on the VIP. If the proxy servers aren't pointing to LTM for their default gateway, then you'd want to enable SNAT on the VIP as well to translate the source address on the server side connections to the LTM floating self IP on the server VLAN.

 

 

If that's not working, can you try capturing a tcpdump on all switch ports looking for the VIP and pool member IP addresses? It would make things easier if you temporarily disable all but one pool member.

 

 

tcpdump -ni 0.0 host VIP_IP or host POOL_IP_1

 

 

Another option would be to host the wpad.dat/proxy.pac file with an iRule. Bhattman added an example to the Codeshare which does this:

 

 

http://devcentral.f5.com/wiki/default.aspx/iRules/Proxy_Pacfile_Hosting_without_need_for_Web_servers.html

 

 

Aaron