Forum Discussion
dbrandel_11561
Nimbostratus
NimbostratusRouting outbound traffic to a different VIP
I have a question regarding the routing capabilities of the F5 LTM. We have a scenario in which we have webservers sitting behind a VIP in our DMZ needing to initiate an HTTP session to an RSA web se...
nitass
Employee
Employeemay we do reverse lookup on destination ip and drop it if it is not part of rsa.com?
RESOLV::lookup wiki
http://devcentral.f5.com/wiki/iRules.resolv__lookup.ashx
if it is, perform snat. so, source ip will be bigip. on firewall, only allow traffic from bigip ip.
is this a little bit better?
just my 2 cents.