Transparent proxy from within an iRule

Hmm ... if I had a Standard VS to intercept HTTP traffic (and send redirects), and another VC (IP forwarding) with an iRule that called “snat automap” to permit certain hosts ... they’d both have the same source & destination IPs and service port. How would traffic figure out which VC to use?

Regardless, I can test tomorrow.

It also occurs to me that I can do it all in an IP Forwarding VC. The iRule can use tcp::respond to send back an HTTP rewrite. The same iRule can call “snat automap” to allow certain traffic through.

Thanks for the tip, I’ll keep testing tomorrow.