For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Elias_O_16228's avatar
Elias_O_16228
Icon for Nimbostratus rankNimbostratus
Jun 18, 2017

Two SNAT iRULE with same Origin IP addresses

I have two SNATs (SNAT1 and SNAT2) all in the same VLAN working just fine. Now, I want SNAT1 also to translate port 80 traffic to SNAT2 (this is snat pool) virtual servers based on url (e.g. abc.com...
devops
iRules
LTM
security
Elias_O_16228's avatar
Elias_O_16228
Icon for Nimbostratus rankNimbostratus
Jun 19, 2017

Hi Jaikumar,

 

Thanks for your response.

 

The SNAT1 VIP is currently 443 and SNAT2 VIP is only port 80.

 

I want some SSL traffic going through SNAT2 as well (443 and 80).

 

The SNAT1 traffic is only to two destinations, which could be URL or IP address.

 

The goal is to add https traffic to SNAT2 (https and http) via irule.

 

If https and http SNAT to SNAT2 virtual IP (default)

 

If https://www.abc123.com and/or https://www.utts123.com SNAT to SNAT1 virtual server.

 

I am running version 12.1.1. There used to be SNAT rule on version 10.x where you can define the ip addresses, but it appears missing on 12.x.