ECOC F5GA Telemetry Demo:

#!/bin/bash

# Enable routing/NAT on TFS-E2E

echo "net.ipv4.ip_forward=1" | sudo tee -a /etc/sysctl.d/20-ipv4-forward.conf

sudo sysctl -p

# DNAT from VPN to VM-B

sudo iptables -t nat -A PREROUTING -i tun0 -p tcp --dport 8881 -j DNAT --to-destination 10.254.0.9:8080

sudo iptables -t nat -A PREROUTING -i tun0 -p tcp --dport 8882 -j DNAT --to-destination 10.254.0.9:8083

# MASQUERADE replies from VM-B back to VPN (generic, not by port)

sudo iptables -t nat -A POSTROUTING -o enp0s3 -s 10.0.58.0/24 -j MASQUERADE

sudo iptables -t nat -A POSTROUTING -o enp0s3 -s 10.1.7.0/24 -j MASQUERADE

sudo iptables -t nat -A POSTROUTING -o enp0s3 -s 192.168.0.0/16 -j MASQUERADE

# allow new+established from VPN to VM-B’s 8080/8083

sudo iptables -A FORWARD -i tun0 -o enp0s3 -p tcp -d 10.254.0.9 --dport 8080 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT

sudo iptables -A FORWARD -i tun0 -o enp0s3 -p tcp -d 10.254.0.9 --dport 8083 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT

# allow return traffic back from LAN to VPN

sudo iptables -A FORWARD -i enp0s3 -o tun0 -m state --state ESTABLISHED,RELATED -j ACCEPT

echo "Done!"