Apple Facetime issues

Hi everyone...

 

I'm currently having problems with Apple Facetime traffic with Big-IP LTM 8900... I have made some packet capturing from Facetime traffic and I noticed that the protocol analyzer recognizes SIP/SDP traffic but when I inspected more deeply this packets, I saw that Facetime doesn't use standard SIP UDP Port 5060. It uses random UDP Ports.

 

Also, I'm suspecting that the event "CLIENT_ACCEPTED" of an iRule that load balances traffic based on source IP address is not being triggered. This is because I saw a SNAT IP Address in the VIA Field of the SIP Header that shouldn't be used by the originator source IP Address.

 

Just to try to be clearer, the traffic is handled by the following way:

 

- If source IP Address is A.A.A.A, it's loadbalanced to pool A. The source IP A.A.A.A is translated (NAT'ed) to SNAT B.B.B.B within pool A;

 

- If source IP Address is C.C.C.C, it's loadbalanced to pool B. The source IP C.C.C.C is translated (NAT'ed) to SNAT D.D.D.D within pool B;

 

Well, I tried to use Facetime with an iPad with source IP A.A.A.A but in the pcap file I saw the IP D.D.D.D in the VIA Field of the SIP Header.

 

I thought about using an iRule with the "SIP_REQUEST" event but my question is: Can "SIP_REQUEST" iRule event, SIP Profiles and SIP Persistence Profile handle this kind of SIP traffic (using non standard UDP Port)?