use rule to configure destination address translation

There currently is not a rule command to disable/enable NAT. I have added a request for this command.

 

 

However, you can currently disable the NAT on the pool and then select between the different pools.

 

Yes, you can configure it on the pool.

 

 

In the GUI, make sure you select Advanced on the Pool page and then you will see the disable NAT attribute.

 

 

On bigpipe, you should be able to do the following:

 

 

bigpipe pool poolB nat disable

 

Yes, that's what disabling NAT on the pool does. Thanks.

Disabling NAT on a pool will prevent the source IP addresses of connections load balanced through that pool from being translated by a NAT, just as disabling SNAT on a pool will prevent the source IP addresses of connections load balanced through that pool from being translated by a SNAT.

 

 

Is there an iRule command to disable destination address translation? Something equivalent to "translate addr disable" on the VIP?

[blockquote] Disabling NAT on a pool will prevent the source IP addresses of connections load balanced through that pool from being translated by a NAT [/blockquote]

 

 

Not in v9. Disabling NAT on a pool in v9 prevents the destination address from being translated. We probably should have called it "DNAT".

 

 

So, to summarise

 

 

v4.x terminology:

 

 

"SNAT" : "Stateful/Secure" NAT, source address translation.

 

"NAT" : stateless NAT, source address translation.

 

 

v9 terminology:

 

 

"SNAT" : "Source" NAT.

 

"NAT" : Destination NAT.

 

 

All entities in v9 are stateful in the interests of security, unless loose initiations/closes are enabled in the fastL4 profile. (And even then it's stateful under the covers.)

Easy

 

Create another virtual server which DOES have address / port translation enabled. (Fast L4 works fine)

 

Then select this vs with "virtual"

 

eg:

 

Heres an iRule that makes a certain non-intercepting proxy (polipo) work in intercepting mode:

 

 

 

when HTTP_REQUEST {

 

if { ![IP::addr [IP::client_addr] equals 192.168.101.180]} {

 

set httphost [HTTP::host]

 

set httpuri [HTTP::uri]

 

set request "http://$httphost$httpuri"

 

log local0. "request $request"

 

HTTP::uri $request

 

virtual vs_proxy

 

}

 

}

 

 

 

 

Jan

 

'Aut Viam Inveniam Aut Faciam'

 

Holtzhausen