For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Tony2020's avatar
Tony2020
Icon for Nimbostratus rankNimbostratus
May 11, 2018

Redirect based on source IP to an external IP

Hi All, Question as to the best way to do this...either using a LTM or GTM. We are migrating a service from internally to a SAS based solution and we want to redirect servers in a few internal subn...
application delivery
BIG-IP
devops
iRules
jurgenvdmark_14's avatar
jurgenvdmark_14
Icon for Nimbostratus rankNimbostratus
May 16, 2018

First of all redirecting only works for http(s) traffic. You can't redirect traffic for non http(s) traffic, because it isn't part of the protocol. So there is no way to let the client know that it should connect to a different host for non http(s) traffic.

For http OR https you can simply use a http profile which redirects the traffic:

ltm profile http redirect_to_sas {
    app-service none
    fallback-host http://2.2.2.2
}

In a similar way you can make a http profile for redirect for https and redirect for https port 8443.

For the SSH connection you can use the node statement in an iRule (see: https://devcentral.f5.com/wiki/iRules.node.ashx)

I hope this helps