Forum Discussion

kellya_50023's avatar
kellya_50023
Icon for Nimbostratus rankNimbostratus
Jul 26, 2012

SNAT

Hi, I am new to irules and I have an issue with one of my customers where they require a SNAT enabled to route traffic correctly but they dont want the IP address to be that of the F5 self IP address but that of the source that it has come from, is this possible with an irule?
application delivery
dev
devops
iRules
  • Richard__Harlan's avatar
    Richard__Harlan
    Historic F5 Account
    Jul 26, 2012
    If it traffic is sourced from the client's IP then the f5 in not SNATing the connection. That would be routed mode for the f5. Now if you need the IP address of the client for the logs. You can use SNAT and then use the x-fowarded header in the HTTP profile to show the server what the true IP address is. If this will not work you can use the TCP options field

     

     

    https://devcentral.f5.com/Tutorials/TechTips/tabid/63/articleType/ArticleView/articleId/1086447/Accessing-TCP-Options-from-iRules.aspx