Forum Discussion

dbrandel_11561's avatar
dbrandel_11561
Icon for Nimbostratus rankNimbostratus
Jan 19, 2012

Routing outbound traffic to a different VIP

I have a question regarding the routing capabilities of the F5 LTM. We have a scenario in which we have webservers sitting behind a VIP in our DMZ needing to initiate an HTTP session to an RSA web se...
config
design
nitass's avatar
nitass
Icon for Employee rankEmployee
Jan 24, 2012
may we do reverse lookup on destination ip and drop it if it is not part of rsa.com?

 

 

RESOLV::lookup wiki

 

http://devcentral.f5.com/wiki/iRules.resolv__lookup.ashx

 

 

if it is, perform snat. so, source ip will be bigip. on firewall, only allow traffic from bigip ip.

 

 

is this a little bit better?

 

 

just my 2 cents.