For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

TJ_Vreugdenhil's avatar
TJ_Vreugdenhil
Icon for Cirrus rankCirrus
Sep 13, 2018

SNAT node to VIP iRule

Hey everyone - V13 All nodes point to F5 as default gateway Forwarding IP VIP 0.0.0.0 We would like outbound connections from each node to SNAT to it's respective VIP IP. Does someone have a...
application delivery
iRules
LTM
security
snat
Leonardo_Souza's avatar
Leonardo_Souza
Icon for Cirrocumulus rankCirrocumulus
Sep 13, 2018

There are many ways to do that, I will give a couple ones.

 

First option, multiple virtual servers.

 

You could create multiple forward virtual servers with destination 0.0.0.0/0 and source as the server ip, and with the snap pool with the IP you want.

 

Second, single forward virtual server, and irule + datagroup. The iRule would perform the snat based in the source IP and get the snat IP from the datagroup.

 

Some useful links for that:

 

https://support.f5.com/csp/article/K14800

 

https://devcentral.f5.com/wiki/irules.snat.ashx

 

https://devcentral.f5.com/wiki/irules.class.ashx