For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ethan_Erchinger's avatar
Ethan_Erchinger
Icon for Nimbostratus rankNimbostratus
Mar 09, 2006

Snat pool choice based on destination URL

Hi,     We have a group of servers that make outbound HTTP requests to a partner. We'd like requests going to a specific uri, call it partner.com/a to come from a specific pool of addresses. R...
application delivery
dev
devops
iRules
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Mar 09, 2006
I would make a specific vip for your partner site, even if it is only one server. You could try something like this:


rule snat_selection {
  when HTTP_REQUEST {
    if { [HTTP::uri] starts_with "/a" } {
      use snatpool snat_a
      use pool partner_pool
    } elseif { [HTTP::uri] starts_with "/b" } {
        use snatpool snat_b
        use pool partner_pool
    } else {  }
  }
}
snatpool snat_a {
  member x.1.1.1
  
  member x.1.1.16
}
snatpool snat_b {
  member x.1.1.17
  
  member x.1.1.32
}
snatpool snat_default {
  member x.1.1.33
  
  member x.1.1.254
}
pool partner_pool {
  member :80
  monitor all tcp  or whatever is appropriate
}
virtual partner_virtual {
  destination 10.1.0.100  assuming this is defined on your ltm
  snatpool default_snatpool  if necessary
  ip protocol tcp
  profile http
  rule snat_selection
}

Note that this is not tested. HTH