Forum Discussion

LillyM_9417's avatar
LillyM_9417
Icon for Altostratus rankAltostratus
Apr 27, 2011

avoid changing source port of the connection while using SNAT

Hello,     We are using SNAT in the irule. Lets assume client's Ip address 192.1.1.1 and port 9999, after the SNAT operations   we manage to change the clients IP address to spesific ip add...
config
design
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
Apr 29, 2011
What kind of application is this? Do clients use the same source port at the same time?

 

 

If clients all use the same source address you could try creating a SNAT pool with many addresses, configure that on the virtual server and set the virtual server source port setting to strict preserve. If the changing source address from the SNAT pool config becomes a problem, you could use a hash to determine the SNAT address to use. This iRule would replace the need for a defined SNAT pool.

 

 

http://devcentral.f5.com/wiki/default.aspx/iRules/snat_pool_persistence.html

 

 

Aaron