For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Laudec_107382's avatar
Laudec_107382
Icon for Nimbostratus rankNimbostratus
Nov 26, 2008

Preserving Src IP in TCP Packet with Snat

I have a client that needs to have incoming connections loadbalanced. Due to the nature of the deployment and architecture, the BigIPs were deployed in a one-arm installation. The clients only need to be loadbalanced. The servers are not HTTP servers.

 

 

Is there an irule that will preserve the client IP address, even if the return path bypasses the BigIP, they only need to be loadbalanced.
application delivery
dev
devops
iRules

2 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Nov 26, 2008
    If you're able to make changes on the web servers, you could potentially use nPath routing to accomplish this. You can get more info on this in the LTM Soltuions Guide for your version. Here is the section from 9.4.3:

     

     

    Configuring nPath Routing

     

    https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm_sol_guide_943/sol_npath.html

     

     

    Aaron
  • Laudec_107382's avatar
    Laudec_107382
    Icon for Nimbostratus rankNimbostratus
    Nov 26, 2008
    Hi,

     

     

    Unfortuanately the loadbalanced machines are linux based systems, that are running a custom app for ATM tellers..so no web servers or interfaces. The app needs to be able to see the source IP in order to facilitate transactions.