Forum Discussion

aaperson_255899's avatar
aaperson_255899
Icon for Nimbostratus rankNimbostratus
Jul 24, 2017

Pass traffic directly to a pool member

How do I pass SSH traffic from the end user to the pool member, passing through the load balancing step. (Not going around it by SSH directly to the IP of the pool member) The virtual server that exists is a listening on all ports/protocols. There are 4 pool members. I don't want to make 4 Forwarding IP for all virtual servers. I'm thinking an iRule might work but I haven't been able to find an example.

 

Suggestions? and thanks in advance!

 

3 Replies

  • You got me confused here. If you want to achieve this via an Irule, the Irule needs to be mapped with a VS to be invoked first. For a VS, there needs to be a VIP. But you dont intend to use the VIP but directly want the traffic to be forwarded to the pool member.

     

    If you want to bypass the LTM, why not just SSH the pool member IP itself. The traffic would be loadbalanced only if SSH to the VIP, SSH to the pool member means its a bypass.

     

  • Requirements are to have port 22 traffic source and destination accounted for, not going around the F5.

     

    Client-> to -> VIP listening on all ports --> port 22 traffic --> pool member specified by Client

     

    All other traffic to Pool --> to Pool Member

     

  • Try this,

    when CLIENT_ACCEPTED {
        switch [TCP::local_port] {
            "22" { pool Pool_22 }
        }
    }
    when SERVER_CONNECTED {
      This logs information about the TCP connections on *both* sides of the full proxy
    set client_remote "[IP::client_addr]:[TCP::client_port]"
    set client_local  "[IP::local_addr clientside]:[TCP::local_port clientside]"
     set server_local  "[IP::local_addr]:[TCP::local_port]"
    set server_remote "[IP::server_addr]:[TCP::server_port]"
    log local0. "Got connection: Client($client_remote)<->($client_local)LTM($server_local)<-->($server_remote)Server"
    }