For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jkotsay_44216's avatar
jkotsay_44216
Icon for Nimbostratus rankNimbostratus
Sep 09, 2008

Using IRule to direct traffic from specific source to VIP on another LTM

Hi, just wondering if anyone might have a sample of an irule that routes traffic to a certain vip based on source address criteria. In my case, I'd actully like to direct traffic to a vip on another ...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Sep 09, 2008
Hi John,

Which LTM version are you running? Is it 9.4.0 or higher? Do you want the destination address translated when you forward it to the second LTM's virtual server? Or are you trying to forward the connection request to the second VIP with the client's original destination IP? If the latter, you could use something like this: 

 
 when CLIENT_ACCEPTED { 
  
    log local0. "[IP::client_addr]:[TCP::client_port] -> [IP::local_addr]:[TCP::local_port]" 
  
     Check the source IP 
    if {[IP::addr [IP::client_addr] mask 255.255.255.0 equals 10.1.2.0]}{ 
  
       log local0. "[IP::client_addr]:[TCP::client_port]: matched IP check.  Routing to 10.0.1.1." 
  
       node 10.0.1.1 
    } 
 }

IP::addr (Click here)

node (Click here)

Aaron