Forum Discussion

PacketHead_4009's avatar
PacketHead_4009
Icon for Nimbostratus rankNimbostratus
Feb 15, 2010

iRule - Sessions to specific IP on the Backend - ProxyPass?

Hello,

 

 

I hope I am explaning this right. What I need to do is terminate incoming SSL sessions on the F5 VIP then on the backend communication to the server I want all user sessions to be seen as a specific static IP when the request goes to the backend server. The reason for this is that we need to setup specific caputers and policies on the web server to only allow a specific IP address to access it. I was told I can set this up by using ProxyPass iRule? Can this be done?

 

 

Please let me know if you need more info.

 

 

Regards,

 

 

James
application delivery
dev
devops
iRules

1 Reply

Sort By
  • hooleylist's avatar
    hooleylist
    Icon for Cirrostratus rankCirrostratus
    Feb 16, 2010
    Hi James,

     

     

    The proxypass iRules are more geared for proxying HTTP requests to alias an external URL to an internal URL. From what you've described, I think you just need to define the static source IP as a SNAT pool address and then add the SNAT pool to the VIP. This would ensure that all packets going from LTM to the VIP's pool members would be sourced from the static IP you specify.

     

     

    Try reviewing the online help on the SNAT page, or search for the SNAT section in the LTM config guide for your version on AskF5.com.

     

     

    Aaron