For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Peter__Chan_109's avatar
Peter__Chan_109
Icon for Nimbostratus rankNimbostratus
Sep 20, 2005

Using iRule to persist outbound connection to the same node

Hi Folks,   I'm a newcomer on iRule and need some help on writing iRules. The question is the client initiates a connection to a VIP and then logon a server, the server will then make a outbound co...
application delivery
dev
devops
iRules
Brian_Gupta_115's avatar
Brian_Gupta_115
Icon for Nimbostratus rankNimbostratus
Sep 20, 2005
One thing to keep in mind. There are issues involved with server initiated connections that connect to themselves.

 

 

When the server initiates a connection with the VIP, it will recieve this connection, bit it will look like it is coming from itself. Unfortunately, since the server initiated the connection to the VIP, it will not have an existing connection and will drop the packets.

 

 

Theoretically you could enable SNAT and it *should* work. (I haven't tested).

 

 

Why do you need this?

 

 

Cheers,

 

-Brian