Nimbostratus
NimbostratusHello:
Here is datagroup config:
ltm data-group internal Office_redirect_string {
records {
\*.24ur.com { }
\*.microsoft.com { }
\*.onedrive.\* { }
\*.onedrive.live.com { }
www.avto.net { }
www.najdi.si {
data www.najdi.si
}
www.pristavec.si { }
www.rtvslo.si {
data www.rtvslo.si
}
www.smart-com.si { }
www.telprom.si {
data www.telprom.si
}
}
type string
}
I think that redirect traffic goes to gw but why Web page doesn't open.
NacreousPlease update your datagroup so it looks like this, Microsoft requests were not going into the 'if' condition as datagroups do not parse wildcard characters (*).
ltm data-group internal Office_redirect_string {
records {
24ur.com { }
microsoft.com { }
onedrive { }
avto.net { }
najdi.si { }
pristavec.si { }
rtvslo.si { }
smart-com.si { }
telprom.si { }
}
type string
}
Ok, thanks, but I don't now why sites which are redirected are not open in client. Other pages which goes to proxy works but other which are in data group not works.
NacreousThe forwarding probably isn't working as you've defined a pool member to 'forward' to. F5 by default will translate destination IP address to that of the pool members. You'll probably find your firewall is dropping traffic.
To get round this you have two options, disable address translation:
when HTTP_REQUEST {
if {[class match [string tolower [HTTP::host]] contains o365_list]} {
translate address disable
node default_gw
} else {
pool Pool_BC
}
}
Or.. if your default gateway for your F5 device points out towards your firewall (and therefore internet) you can just use the
forwardwhen HTTP_REQUEST {
if {[class match [string tolower [HTTP::host]] contains o365_list]} {
forward
} else {
pool Pool_BC
}
}
Hello.
I try this solution and doesn't work. VS and nodes are in the same network. I see in ltm log that traffic goes to datagrup list. I try forward and translate address feature.
NacreousIs the VS that this iRule is applied to on the same network as
node default_gwIf so have you configured SNAT on your VS?
NimbostratusYes in the same network. Source address translation is set to "none"
NacreousYou will likely need to configure SNAT, please select Auto-SNAT
NimbostratusI try with this option and result is the same.
NacreousYou're going to have to do some basic troubleshooting to find out the cause of the fault.
A few pointers:
NimbostratusOk I will do this. Thanks for now. I will update post with my findings.