For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Eric_Van_Tol_10's avatar
Eric_Van_Tol_10
Icon for Nimbostratus rankNimbostratus
Oct 10, 2005

Selective SNAT rule

Hi all,   I am new to iRules and just implemented my first one today to resolve a problem we've been seeing with NAT. However, I need to create another one and I need to know the correct syntax to...
application delivery
dev
devops
iRules
Brian_Gupta_115's avatar
Brian_Gupta_115
Icon for Nimbostratus rankNimbostratus
Oct 13, 2005
Two things I notice...

 

 

1) I would suggest defining the default SNAT for the VIP. (We'll disable snat in the rule - The overhead is minimal).

 

Add one of the following to your virtual definition:

 

- snatpool snat_pool (Let me know if you want to be implicit)

 

- snat automap (I use this all the time, works like a charm. You need to make sure you have configured an automap IP. Let me know if you need help with this.)

 

2) I've had difficulty using the fastL4 profile with iRules... Are you sure this is supported? I would suggest getting rid of this profile.

 

 

As for your questions:

 

3) No difference

 

5) Why is the reselect neccesary? I am confused...

 

 

Thanks,

 

Brian