For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kneebolt_142346's avatar
kneebolt_142346
Icon for Nimbostratus rankNimbostratus
May 28, 2014

Redirect IP to specific node or gateway

We have one set of IP's that due to the previous network that had them, we get blocked from a few sites. We have a backup ISP, and until we get a new block to eliminate this problem, Id like to be ab...
nitass's avatar
nitass
Icon for Employee rankEmployee
May 29, 2014

is there a way to redirect based on destination IP vs trying to do it with an HTTP_REQUEST?

 

you can use CLIENT_ACCEPTED event. check destination ip and then select snat and pool.

 

Destination Based Routing

 

https://devcentral.f5.com/wiki/irules.destinationbasedrouting.ashx

 

please be noted that $:: prefix is no longer needed to refer to data group (i.e. just use data group name).

 

What I am seeing is the initial request on TCP 80 is still going out our Cogent connection. Its destination port is 80, but the packet doesn't contain a URI yet, so I think the irule never gets triggered.

 

i do not think so. i understand you are using http profile, so serverside's syn packet is sent after http request is received on clientside.

 

sol8082: Overview of TCP connection setup for BIG-IP LTM virtual server types

 

http://support.f5.com/kb/en-us/solutions/public/8000/000/sol8082.html