����̐ݒ�̊m�F
���݂�VS��Pool�̐ݒ�͈ȉ��̂悤�ɂȂ��Ă��܂��B
root@cookbook(Active)(tmos)# list ltm virtual
ltm virtual HTTP-VS-IPv4 {
destination 10.10.88.21:http
ip-protocol tcp
mask 255.255.255.255
pool http-pool1
profiles {
http { }
tcp { }
}
}
root@cookbook(Active)(tmos)# list ltm pool http-pool1
ltm pool http-pool1 {
members {
10.10.40.40:http {
session monitor-enabled
}
10.10.40.41:http {
session monitor-enabled
}
}
monitor gateway_icmp
}
Pool�����L�������̂ŁA����http-pool1��V�������VS�Ɋ֘A�Â��邱�Ƃɂ��܂��B
�ݒ�
�������ł����A1��VS���쐬���邾���Ȃ̂ŃR�}���h��ōς�ł��܂��܂��B
root@cookbook2(Active)(tmos)# create ltm virtual HTTP-VS-IPv6 { destination fd00:10:10:88::21.http ip-protocol tcp mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff pool http-pool1 profiles add { http { } tcp { } } }
�m�F���܂��傤
root@cookbook(Active)(tmos)# list ltm virtual
ltm virtual HTTP-VS-IPv4 {
destination 10.10.88.21:http
ip-protocol tcp
mask 255.255.255.255
pool http-pool1
profiles {
http { }
tcp { }
}
}
ltm virtual HTTP-VS-IPv6 {
destination fd00:10:10:88::21.http
ip-protocol tcp
pool http-pool1
profiles {
http { }
tcp { }
}
}
�a�ʊm�F
�O���Windows�̃N���C�A���g���g�p���܂������A�X�N���[���V���b�g�����̂��ʓ|�Ȃ̂ō����Linux�̃N���C�A���g��p�ӂ��܂����B���̃N���C�A���g����a�ʊm�F���s���܂��B
$ curl -g http://[fd00:10:10:88::21]/env.php
Destination IP Address:Port -> 10.10.40.41:80
Source IP Address:Port -> 10.10.40.254:56801
X-Forwarded-For ->
Source IP Address��10.10.40.254��BIG-IP���g��internal VLAN�ɐݒ肳��Ă���floating address�ł��BVS�ɂ�SNAT�̐ݒ肪�s���Ă��܂��Av6/v4�̕ϊ���VS�ōs���ꍇ��SNAT�������I�ɐݒ肳��Ă��Ȃ��ꍇ�͎����I��SNAT Automap���ݒ肳��Ă���̂Ɠ������������܂��B
�g���t�B�b�N�����Ȃ��ꍇ�͂���ł����̂ł����A���IP�A�h���X�Ŏg�p�\�ȃ|�[�g�ԍ��ɂ͌��肪���邽�ߓ����ڑ����������ꍇ�ɂ͕�����SNAT�A�h���X��p�ӂ���K�v������܂��B�܂��A�N���C�A���g�̃\�[�XIP�A�h���X���T�[�o�[�Œm�肽���P�[�X������Ǝv���̂ł���ɂ��Ώ����܂��B
SNAT Pool�̗��p
v6�Ɍ���Ȃ��b�ł����ABIG-IP��SNAT������Ƃ��ɂ͑O�q�̒ʂ�|�[�g�ԍ��̌͊��ɒ��ӂ���K�v������܂��BAutomap�ł͒P��IP�A�h���X���g�p����̂ŁASNAT Pool���g�p���ĕ����̃A�h���X���g�p�\�ɂ��܂��B�����internal VLAN�̃Z�O�����g��IP�A�h���X3��SNAT�p�ɂ��܂��B
root@cookbook(Active)(tmos)# create ltm snatpool internalSNATPool members add { 10.10.40.201 10.10.40.202 10.10.40.203 }
������쐬����VS�Ɋ֘A�t���܂��B
root@cookbook(Active)(tmos)# modify ltm virtual HTTP-VS-IPv6 snatpool internalSNATPool
X-Forwarded-For�w�b�_�̗��p
BIG-IP�Ńg���t�B�b�N����������Ƃ��ɁA�ȑO��SSL�̂Ƃ��Ɠ��l�Ƀw�b�_��}�����܂��B�����X-Forwarded-For�w�b�_���g�p���܂��B���̃w�b�_�̑}����HTTP Profile�Œ�`�\�Ȃ̂ŁA�V����HTTP Profile���쐬���Ă����VS�Ɋ֘A�t���܂��B
root@cookbook(Active)(tmos)# create ltm profile http http1 insert-xforwarded-for enabled
root@cookbook(Active)(tmos)# modify ltm virtual HTTP-VS-IPv6 profiles replace-all-with { http1 { } }
root@cookbook(Active)(tmos)# list ltm virtual HTTP-VS-IPv6 ltm virtual HTTP-VS-IPv6 {
destination fd00:10:10:88::21.http
ip-protocol tcp
pool http-pool1
profiles {
http1 { }
tcp { }
}
snatpool internalSNATPool
}
�a�ʊm�F
$ curl -g http://[fd00:10:10:88::21]/env.php
Destination IP Address:Port -> 10.10.40.41:80
Source IP Address:Port -> 10.10.40.201:46568
X-Forwarded-For -> fd00:10:20::20