Forum Discussion

JeffRitze's avatar
JeffRitze
Icon for Nimbostratus rankNimbostratus
Feb 19, 2021

iRule: Log SNAT IP's when using Oneconnect

Hello F5 Friends, I'm at a bit of a loss for how to write an iRule here and I'm hoping you all can help me out. I have a need to send a security vendor the Client Side and Server Side IP addresses...
BIG-IP
devops
iRules
oneconnect
snat
boneyard's avatar
boneyard
Icon for MVP rankMVP
Feb 27, 2021

i dont think there is an easy solution.

 

do you need oneconnect? disabling it seems like a possible solution.

 

a workaround would be to store the CS and SS IPs in a table and check against that before logging a new one. have to think about timeout for the entries though.

 

you can also look at influencing the oneconnect behaviour somehow, perhaps like this

 

https://clouddocs.f5.com/api/irules/ONECONNECT__label.html

 

though that feels tricky.