Forum Discussion

pedinopa_170325's avatar
pedinopa_170325
Icon for Nimbostratus rankNimbostratus
Mar 29, 2016

Automap / Snat

I wrote an irule to redirect traffic to specific web servers. As part of this I want to mask all traffic so it looks like on the F5 is talking to the webserver so I enabled AUTOMAP. When I look at ...
application delivery
iRules
LTM
security
tatmotiv's avatar
tatmotiv
Icon for Cirrostratus rankCirrostratus
Apr 01, 2016

You say you wrote an iRule for REDIRECTING traffic to a specific webserver. That would force the client to open a totally new tcp connection to that server directly after receiving the redirect from the f5, in which case the SNAT setting (automap or SNAT pool) of your virtual processing the iRule will have no effect. That is probably the reason why you see the real client IP in your webserver logfiles.