Forum Discussion
rahvee
Cirrus
CirrusResolving DNS, and dynamically selecting pool
The problem: Some LAN hosts are not permitted outbound access to the internet through the firewall, and yet, they need access to github.com. Unfortunately, github's published CIDR ranges are enormous...
you can simple create pool member using hostname instead of ip address
welinton_trigueiroCirrus
CirrusCreate a NODE using the FQDN github.com and adjust the TTL to the desired time.
Associate this NODE with a POOL named github_pool.
Create a reverse-proxy virtual server "vs_github_proxy" of type Performance (Layer 4), associate the POOL in the resources section. Additional settings, such as defining the VLAN for incoming traffic or even a SNAT Pool, can be configured as needed.
If necessary, add an iRule to restrict access to specific URLs within the GitHub domain.
If you do not want to filter the ports, you can create a port list in Shared Objects and associate it with the virtual server.
