Forum Discussion

shashe's avatar
shashe
Icon for Cirrus rankCirrus
Dec 25, 2022

split-tunnel but include some public URLs.

How can I configure a split-tunnel on APM for all the private IPs but also include some FQDNs that resolve to public IPs to go through the tunnel? 
devops
AlexBCT's avatar
AlexBCT
Icon for Cumulonimbus rankCumulonimbus

Hi Shashe, 

You should be able to achieve this with Address spaces (Access  ››  Connectivity / VPN : Network Access (VPN) : Address Spaces) 

Fill in the publicIP's of the application, together with their FQDN's, and then attach it to the tunnel, under the Split Tunneling section. More details: https://techdocs.f5.com/en-us/bigip-16-1-0/big-ip-access-policy-manager-network-access/configuring-address-spaces/what-is-address-space.html 

Please note though that this address space only exists since version 16.1. If you are running on earlier versions, you should be able to achieve the same result with with the IP address space and DNS address space directly under the Split Tunneling configuration. 

Hope this helps. 

shashe's avatar
shashe
Icon for Cirrus rankCirrus
Dec 26, 2022

AlexBCT I see IP and DNS space in my settings. Can I just put the RFC 1918 space in the IP space tab and add public app's fqdn with wildcard for e.g. *.example.com in DNS space? Will this ensure all the private IPs along with any traffic to that public fqdn passes through the VPN tunnel? I'm little confused with the description has provided for these tabs. 

 

Thank you so much for your response.