Redirect All TCP Traffic

Question

Did somebody have experience in using F5 to refirect all tcp traffic to a wan optimization appliance like BlueCoat or Riverbed.&nbsp;
For example:&nbsp;
virtual WanOp {&nbsp;
destination 0.0.0.0:0&nbsp;
ip protocol tcp&nbsp;
profile fastL4&nbsp;
pool WanOp&nbsp;
}&nbsp;
pool WanOp {&nbsp;
monitor all tcp&nbsp;
member 10.10.10.1:0&nbsp;
}&nbsp;
What I need is to redirect all tcp traffic and also the server responses (Inbound/Outbound) because im using IP-Spoofing and i dont want asymmetrical routing that could break the connections.&nbsp;
Thanks for your help.&nbsp;
Regards!&nbsp;

mohamed_lrhazi · Answer

All TCP traffic need to go to 10.10.10.1? What about UDP traffic? 
&nbsp; What if you made 10.10.10.1 the default gateway, and just dropped all UDP traffic? 
&nbsp;  &nbsp;

rgalvan_76808 · Answer

I need only TCP redirection, and I can´t use it as a default gateway because the Wan Op appliance will become in a sigle point of failure, previusly I was using WCCP but it is not enough intelligent to notice if the Wan Op is processing traffic or not, thats why we are using F5.&nbsp;
&nbsp;
Diagram:&nbsp;
WAN Routers ======= F5 in HA ========= Core Switch&nbsp;
                                              l l&nbsp;
                               Wan Op Appliance&nbsp;
*Wan Op appliance is connected to F5&nbsp;

what_lies_bene1 · Answer

Shame you can't just use WOM! =] 
&nbsp;  
&nbsp; How are you going to test (from and with the F5) if the appliance is processing traffic or not?

rgalvan_76808 · Answer

Wan Op appliances have some acceleration tests to see if it is processig traffic or not, we can use this tests on CLI or Web and depending on the result, the F5 should redirect or not the traffic

what_lies_bene1 · Answer

OK, and can the F5 send traffic at layer three?

Forum Discussion

Redirect All TCP Traffic

7 Replies

Recent Discussions

Client certificate Authentication - open multiple tabs

google autenticator broken barcode

Chrome V 124+ on MacOS - Virtual Server Access Issue

vulnerabilities (CVE-2020-36363), CVE-2016-0736,CVE-2019-6593-FOR VERSION BIGIP LTM-16.1.4

Port Group on F5OS network setting

Related Content

irule uri traffic redirection failing

fellow traffic

Anchor Link Redirect

Block traffic

ASM Local Traffic Policy to redirect on specific URL