For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Larry_Dalton_53's avatar
Larry_Dalton_53
Icon for Nimbostratus rankNimbostratus
Aug 14, 2007

BigIP and IronPort

When you snad IronPort from BigIP it can't read the return IP. If you don't snad, IronPort returns to the senders IP. Any solutions to load balancing IronPort with BigIP?   Larry
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Feb 23, 2009
If the client and pool member are on the same subnet you have to either use SNAT to ensure the server doesn't respond directly back to the client or configure the server to respond back directly to the client using the VIP address (the one the client made the request to). This second option is referred to as nPath in the F5 world. Here is a link to the Solution Guide for 9.4.3+:

 

 

Configuring nPath Routing

 

https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm_sol_guide_943/sol_npath.html

 

 

Aaron