Forum Discussion

Paul_Visser_193's avatar
Paul_Visser_193
Icon for Nimbostratus rankNimbostratus
Aug 19, 2016

communicate between route domains

Hello,

I need to access a vip in another route domain based on a given url via irule. Is this possible? We tried :

    server.company.nl {
        virtual /route_domain/vipname }

with correct routing (automap address) and firewall permit from F5 to the other route_domain it doesn't work. When using the pool in the other route_domain or configuring the vip address in the current route_domain it works.

Any ideas?

7 Replies

  • Route domains are virtual routing instances. If you want to cross from one to the other, you're going to have to leave the F5 on an interface in the originating route domain, and re-enter the F5 on an interface in the destination route domain. This might be an external router, firewall, etc, but it won't be an iRule.

     

    • ekaleido's avatar
      ekaleido
      Icon for Cirrus rankCirrus

      p.s. This assumes no parent-child relationship between the route domains.

       

  • Route domains are virtual routing instances. If you want to cross from one to the other, you're going to have to leave the F5 on an interface in the originating route domain, and re-enter the F5 on an interface in the destination route domain. This might be an external router, firewall, etc, but it won't be an iRule.

     

    • ekaleido_26616's avatar
      ekaleido_26616
      Icon for Cirrocumulus rankCirrocumulus

      p.s. This assumes no parent-child relationship between the route domains.

       

  • Forwarding of traffic between route domains is by default enabled between route domains in a parent-child relationship only. (That is, traffic received in a child route domain can be forwarded to a parent route domain and the reverse.)

     

    Consequently, by default, the BIG-IP system does not load balance traffic arriving in route domain 1 to servers in any other route domain, except for the parent route domain.

     

    https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-ip-routing-administration-11-2-0/2.html

     

    As ekaleido explained, you might need a next-hop for communicating between route domains if there is no parent-child relationship.

     

    -Jinshu

     

  • The problem is solved. Triggered by your answers to route outside the F5, I just used:

    server.company.nl {
        node ip-address port }
    

    Thanks for your help.