Forum Discussion

Beginner-T's avatar
Beginner-T
Icon for Altostratus rankAltostratus
Jul 18, 2023

SNAT is not working in a one-arm configuration.

Thank you for all advice. Now we are testing by configuring the BIG-IP VE with the one-arm as shown below, I want to connect a word press server via Big-ip VE LTM Version: 17.1.0.1. We can success ...
BIG-IP-VE
event
  • KeesvandenBos's avatar
    KeesvandenBos
    Jul 19, 2023

    Could you add the follow irule to the virtual server?

    when HTTP_REQUEST {
   # Disable the stream filter for client requests
   STREAM::disable
}
when HTTP_RESPONSE {
    # Disable the stream filter for server responses
    STREAM::disable
# Enable the stream filter for text responses only

 if {([HTTP::status] == 200) && ([HTTP::header value Content-Type] starts_with "text")} {
  # Replace '10.100.100.200' with '10.200.6.1'
  STREAM::expression {@10.100.100.200@10.200.6.1@}
  # Enable the stream filter
  STREAM::enable
 }
}
  • Beginner-T's avatar
    Beginner-T
    Icon for Altostratus rankAltostratus
    Jul 19, 2023

    Thank you for the reply.

    I applied the curl -v http://10.200.6.1/  from the client PC 

    * Trying 10.200.6.1:80...
    * Connected to 10.200.6.1 (10.200.6.1) port 80 (#0)
    > GET / HTTP/1.1
    > Host: 10.200.6.1
    > User-Agent: curl/8.0.1
    > Accept: */*
    >
    < HTTP/1.1 200 OK
    < Server: nginx/1.20.1
    < Date: Wed, 19 Jul 2023 00:54:17 GMT
    < Content-Type: text/html; charset=UTF-8
    < Transfer-Encoding: chunked
    < Connection: keep-alive
    < X-Powered-By: PHP/8.1.14
    < Link: <http://10.100.100.200/wp-json/>; rel="https://api.w.org/"
    <
    <!DOCTYPE html>
    <html lang="en-US">
    <head>

    • Paulius's avatar
      Paulius
      Icon for MVP rankMVP
      Jul 19, 2023

      Beginner-T It appears that your server is sending a response to the client telling them to connect to "http://10.100.100.200/wp-json" and that is most likely the cause of your issue. If you opened developer tools on the client side you should see that arriving on your machine. You might see if you can change that response to a relative path rather than the literal host of "10.100.100.200" and see if that fixes your issue.

    • KeesvandenBos's avatar
      KeesvandenBos
      Icon for MVP rankMVP
      Jul 19, 2023

      Could you add the follow irule to the virtual server?

      when HTTP_REQUEST {
   # Disable the stream filter for client requests
   STREAM::disable
}
when HTTP_RESPONSE {
    # Disable the stream filter for server responses
    STREAM::disable
# Enable the stream filter for text responses only

 if {([HTTP::status] == 200) && ([HTTP::header value Content-Type] starts_with "text")} {
  # Replace '10.100.100.200' with '10.200.6.1'
  STREAM::expression {@10.100.100.200@10.200.6.1@}
  # Enable the stream filter
  STREAM::enable
 }
}
      • Beginner-T's avatar
        Beginner-T
        Icon for Altostratus rankAltostratus
        Jul 21, 2023

        Thank you so much.

        I resolved the issue using your answer's iRule.