For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

TUTU_196998's avatar
TUTU_196998
Icon for Nimbostratus rankNimbostratus
Jan 26, 2017

tcp::option insert client_ip ,Server-side F5 to remove the client IP, do SNAT

I have gone through the following irules insert the address of the client to the TCP: : option, my server topology is F5, so how to remove the option in the back of the F5 client SNAT address do

 

irules : when SERVER_CONNECTED { scan [IP::client_addr] {%d.%d.%d.%d} e b c d TCP::option set 28 [binary format cccc $e $b $c $d] all set tcp_option_content [binary format cccc $e $b $c $d] binary scan $tcp_option_content H* cli_addr_H log local0. "@@@@@$cli_addr_H" set opt28 [TCP::option get 28] log local0. "@@@@$opt28" }

 

Please tell me the address irules

 

application delivery
LTM

2 Replies

  • TUTU_196998's avatar
    TUTU_196998
    Icon for Nimbostratus rankNimbostratus
    Jan 26, 2017

    this my rule,A great god given for TCP: : irules option

     

    when SERVER_CONNECTED { scan $src_cli_addr {%d.%d.%d.%d} e b c d TCP::option set 28 [binary format cccc $e $b $c $d] all set tcp_option_content [binary format cccc $e $b $c $d] binary scan $tcp_option_content H* cli_addr_H }