For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kellya_50023's avatar
kellya_50023
Icon for Nimbostratus rankNimbostratus
Jul 26, 2012

SNAT

Hi, I am new to irules and I have an issue with one of my customers where they require a SNAT enabled to route traffic correctly but they dont want the IP address to be that of the F5 self IP addres...
application delivery
dev
devops
iRules
Richard__Harlan's avatar
Richard__Harlan
Historic F5 Account
Jul 26, 2012
If it traffic is sourced from the client's IP then the f5 in not SNATing the connection. That would be routed mode for the f5. Now if you need the IP address of the client for the logs. You can use SNAT and then use the x-fowarded header in the HTTP profile to show the server what the true IP address is. If this will not work you can use the TCP options field

 

 

https://devcentral.f5.com/Tutorials/TechTips/tabid/63/articleType/ArticleView/articleId/1086447/Accessing-TCP-Options-from-iRules.aspx