Forum Discussion
VIP targeting VIP, preserve src and dst IP
Hi,
Thanks for info. Not very good news.
Let's assume that I will set VS without proxy profile and then extract URL from request using HTTP:uri then disable HTTP profile using HTTP::disable (or use VS without HTTP profile at all and use TCP::collect, TCP::payload to retrieve target URL).
Then I can use RESOLV::lookup to retrieve IP of the server in URL (something what is in fact implemented in HTTP profile in Explicit mode - as far as I understand).
Is there any way to somehow create connection to target host via additional ForwardIP type VS?
Something like:
- snat none - to preserve client IP from proxy request (this frontend VS is used for switching connections between several other VSs on the same BIGIP, some of them need SNAT - so SNAT is enabled in VS config)
- node $target_srv_ip $target_srv_port - not node existing on BIGIP but actual target server from proxy request
- virtual $forwardip_vs - my ForwardIP VS defined on BIGIP
Do you thing it should work in a way that ForwardIP type VS will receive TCP connection with:
- src IP - IP of the client sending proxy request
- dst IP:port - IP and port extracted from URL inside proxy request send by client
Piotr
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com