SNAT with client and pool member on same subnet
Hi,
We have sort of an aut-last-hop feature on our firewall, and the lb is placed in front of the firewall. This ensures when a client from a random vlan behind the firewall connects to a VIP, the return traffic is actually sent back via the LB thanks to the 'auto last hop' like feature, and we gerally do not have to use snat.
But, when a client and the pool member is located in the same subnet, the firewall is not involved, and thus the client drops the return packet that comes directly from the server.
I would like to create a generic irule that would work in all vips, that compares client and pool member subnet.
The more I think about it, the more impossible it seems, since when executing the irule, the pool is not yet selected?
Is it possible to do this in an irule? Or do I need a separate irule for each VIP that will receive traffic where client && pool is on the same subnet?
Thanks for insights!