Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 2461 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Name based NAT rule

vari_g
Hi,

I am running ASG v7. When I create a network definition as a DNS host name, and I am trying to use it in NAT rule, it doesn't seem to work, maybe I am missing something..?

What I have now (and works fine), as a NAT rule is:

Traffic selector:  Any →  HTTPS →  Uplink Primary Addresses  
Destination translation:  server1  HTTPS 

This works fine. However, what I would like to get is:

Traffic selector:  example1.com →  HTTPS →  Uplink Primary Addresses  
Destination translation:  server1  HTTPS 

...and...

Traffic selector:  example2.com →  HTTPS →  Uplink Primary Addresses  
Destination translation:  server2  HTTPS 

Theoretical this seems possible by creating a DNS host name definition, and assigning it to the NAT rule. Since example1.com and example2.com share same IP, I am relying on the NAT rule to differentiate and send the traffic to the appropriate server. Except that this does not work. 

Has anyone done a similar set up..? I would appreciate some help on this.

Thanks,
Gab.


This thread was automatically locked due to age.
  • 0
    This won't work. dns_hosts will resolve to IP addresses as well...

    NAT are packetfilter rules. You can only match on IP addresses, not HTTP requests, thats Layer 7.

    Upgrade to v8 and use "Web Application Firewall" for that.

    Cheers
     Ulrich
  • 0 in reply to da_merlin
    Hi Ulrich,

    Thanks a lot for making that clear. 

    I guess my research on getting this to work is over, and it's about the time starting the research on how to upgrade to v8.

    Thanks a lot again,
    Gab.