Sending traffic to virtual server based on client IP

Question

I'm looking to configure an irule that will direct traffic to one of two virtual servers I have under a WideIP entry. Basically when a request comes in if it's an IP address of 1.1.1.1 I want to send that client to Virtual Server 1 and if it's an IP address of 2.2.2.2 I want to send that client over to Virtual Server 2.

I've done something similar at the LTM level before - example below.

when CLIENT_ACCEPTED {

if { [class match [IP::client_addr] equals CIDR/24] } {

pool testpool

}

dario_garrido · Accepted Answer

Hello.&nbsp;You can do something like these exampleshttps://clouddocs.f5.com/api/irules/DNS_REQUEST.html&nbsp;Also you can experimenting using split-DNShttps://support.f5.com/csp/article/K14421&nbsp;KR,Dario.

b_1 · Answer

So i've setup a split DNS iRule however for some reason, the client IP is not being matched to the IP entries in my datagroup. I've created two datagroups to see if the name was an issue but that didnt resolve the problem. If i switch the configuration to a known working datagroup, split DNS works perfectly. Any ideas? pulling my hair out.

dario_garrido · Answer

Could you share you iRule and datagroup configuration?&nbsp;KR,Dario.

b_1 · Answer

when DNS_REQUEST {
    if { [class match [IP::client_addr] equals datagroupname] } {
        pool practice-dnspool
    }
}

dario_garrido · Answer

Lets try basic troubleshooting...when DNS_REQUEST {
    log local0. "I'm receiving a new dns request and my client IP is [IP::client_addr]"
    if { [class match [IP::client_addr] equals datagroupname] } {
		log local0. "I'm inside and my client IP is [IP::client_addr]"
        pool practice-dnspool
    }
}If no messages are shown in the second step, you should check the datagroup structure. Share this command output.tmsh list ltm data-group internal datagroupnameKR,Dario.

b_1 · Answer

Hmm interesting - so the source IP is coming from our Authoritative DNS server - which makes sense now that I think about it. How could I get around that and/or get the value of the client IP making the actual DNS request? We've done XFF in the past with web applications but I didn't think that would be passed in a DNS packet.

Forum Discussion

Sending traffic to virtual server based on client IP

8 Replies

Recent Discussions

Error while running ansible

ASM instance creation

[ASM] - what is "Browser Challange file" ?

[ASM] - HTML5 Cross-Domain Request Enforcement - CLI command

Reverse Proxy Not Behaving

Related Content

Integrating SSL Orchestrator with Fortinet FortiGate Virtual Edition as a Virtual Wire

iRule for sending traffic to a different pool based on the Hostname.

fellow traffic

Create F5 BIG-IP Next Instance on Proxmox Virtual Environment

F5 Distributed Cloud - Regional Decryption with Virtual Sites