Forum Discussion

Altostratus

Jul 18, 2023

SNAT is not working in a one-arm configuration.

Thank you for all advice. Now we are testing by configuring the BIG-IP VE with the one-arm as shown below, I want to connect a word press server via Big-ip VE LTM Version: 17.1.0.1. We can success ...

BIG-IP-VE

event

KeesvandenBos

Jul 19, 2023

Could you add the follow irule to the virtual server?

when HTTP_REQUEST {
   # Disable the stream filter for client requests
   STREAM::disable
}
when HTTP_RESPONSE {
    # Disable the stream filter for server responses
    STREAM::disable
# Enable the stream filter for text responses only

 if {([HTTP::status] == 200) && ([HTTP::header value Content-Type] starts_with "text")} {
  # Replace '10.100.100.200' with '10.200.6.1'
  STREAM::expression {@10.100.100.200@10.200.6.1@}
  # Enable the stream filter
  STREAM::enable
 }
}

KeesvandenBos

MVP

Jul 18, 2023

Could you post the outcome of curl -v http://10.200.6.1/ ??

Cheers,
Kees

Beginner-T
Altostratus
Jul 19, 2023
Thank you for the reply.
I applied the curl -v http://10.200.6.1/ from the client PC
* Trying 10.200.6.1:80...
* Connected to 10.200.6.1 (10.200.6.1) port 80 (#0)
> GET / HTTP/1.1
> Host: 10.200.6.1
> User-Agent: curl/8.0.1
> Accept: */*
>
< HTTP/1.1 200 OK
< Server: nginx/1.20.1
< Date: Wed, 19 Jul 2023 00:54:17 GMT
< Content-Type: text/html; charset=UTF-8
< Transfer-Encoding: chunked
< Connection: keep-alive
< X-Powered-By: PHP/8.1.14
< Link: <http://10.100.100.200/wp-json/>; rel="https://api.w.org/"
<
<!DOCTYPE html>
<html lang="en-US">
<head>
- Paulius
  MVP
  Jul 19, 2023
  Beginner-T It appears that your server is sending a response to the client telling them to connect to "http://10.100.100.200/wp-json" and that is most likely the cause of your issue. If you opened developer tools on the client side you should see that arriving on your machine. You might see if you can change that response to a relative path rather than the literal host of "10.100.100.200" and see if that fixes your issue.
- KeesvandenBos
  MVP
  Jul 19, 2023
  Could you add the follow irule to the virtual server?
  
  when HTTP_REQUEST { # Disable the stream filter for client requests STREAM::disable } when HTTP_RESPONSE { # Disable the stream filter for server responses STREAM::disable # Enable the stream filter for text responses only if {([HTTP::status] == 200) && ([HTTP::header value Content-Type] starts_with "text")} { # Replace '10.100.100.200' with '10.200.6.1' STREAM::expression {@10.100.100.200@10.200.6.1@} # Enable the stream filter STREAM::enable } }
  - Beginner-T
    Altostratus
    Jul 21, 2023
    Thank you so much.
    I resolved the issue using your answer's iRule.