ltm rule command LSN inbound
iRule(1) BIG-IP TMSH Manual iRule(1)
LSN::inbound
LSN::inbound
SYNOPSIS
LSN::inbound disable
DESCRIPTION
Disable inbound mapping for translation address and port associated
with the current connection.
RETURN VALUE
LSN::inbound disable - Inbound connections can be permitted for a
particular LSN pool to provide end-point independent filtering,
described in RFC 4787. - When end-point independent filtering is
enabled, once a client has sent traffic to a remote system, that remote
system may thereafter use the translation address and port to send
traffic back to the sourcing client. - When end-point independent
filtering is used, translation address/port pairs must be reserved
after first use, and will thus significantly reduce the overall number
of translations for a given address pool set. - Configuration of end-
point independent filtering may significantly decrease overall
performance because traffic may need to be pushed between TMM
instances. - If inbound connections are not configured for an LSN
pool, this command will have no effect.
VALID DURING
AUTH_RESULT AUTH_WANTCREDENTIAL CACHE_REQUEST CACHE_UPDATE
CLIENT_ACCEPTED CLIENT_DATA CLIENTSSL_CLIENTCERT CLIENTSSL_HANDSHAKE
HTTP_CLASS_FAILED HTTP_CLASS_SELECTED HTTP_REQUEST HTTP_REQUEST_DATA
LB_SELECTED RTSP_REQUEST RTSP_REQUEST_DATA SIP_REQUEST STREAM_MATCHED
EXAMPLES
when HTTP_REQUEST {
LSN::inbound disable
}
HINTS
SEE ALSO
CHANGE LOG
@BIGIP-11.3.0
- Initial version where the command was introduced
BIG-IP 2017-01-31 iRule(1)