CSS 11500 Source groups add destination.

[Gomez]

Hi,

Can somebody explain to me the function of source groups and the add destination service? And example would be good. As i understand source groups are used when a server behind the content switch initiates a flow. The source address is replaced by the vip specified in the group. I would like to know what the add destination does? Change the destination address?

Kind regards,

Frederik De Muyter.

[Gilles Dufour]

Frederik,

the source group always nats the source ip address.

However, there is 2 scenarii possible.

1/ the server opens the connection.

In this case you need 'add service ...'

2/ a connection is open to the server.

In this case you need 'add destination service'.

When do we need this 2nd option ?

When for example you want to guarantee that the response from the server goes back through the CSS and not directly to the client.

In this case, you need the client ip when forwarding the traffic to the server.

Gilles.

[naive.naive]

hi giles,

need your expertise explanation..

i'm opting for option 1, but do i need to create a new service (meaning any connection from the server will be allowed) like below ?

service server1

ip add 10.1.1.1

protocol tcp

or i can add the existing service configured, which only restrict to http only?

service server1_80

ip add 10.1.1.1

protocol tcp

port 80

thanks in advance..

[Gilles Dufour]

you can use the existing service.

The group will only look at the ip address anyway.

Gilles.