selective forwarding VS with IP and Port filtering
I have a setup with a F5 ltm behind a firewall. The ltm connects two IP networks.
The customer wants to control all traffic between these two networks (net1 and net2) via the firewall except some high bandwidth connections which should be directly routed by the F5.
My current solution is a forwarding network virtual server for 0.0.0.0 with next hop pool set to the firewall.
In addition I'Ve configured a lot of more precise virtual servers (IP+Port) which accept those connections that should not be filtered by the firewall.
This solution is working fine, it's just not manageable as the number of these Virtual servers is growing too much.
So I look for a more scalable solution to handle the same functionality within a nice irule without endless if/else statements.
My idea was to use a data group in a way to check for destination IP and port and if it matches to just forward the traffic.
Is something like that possible?
Any better ideas?