For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kevin5866_19733's avatar
kevin5866_19733
Icon for Altostratus rankAltostratus
Oct 05, 2018

Can a Health Check be sourced from a SNAT address rather than the F5 self-ip?

Can a Health Check be sourced from a SNAT address rather than the F5 self-ip? My Security team is asking for each application to have it's own SNAT address, which seems great until we come to the rea...
application delivery
BIG-IP
LTM
Philip_Jonsson's avatar
Philip_Jonsson
Icon for MVP rankMVP
Oct 06, 2018

Hey Kevin,

 

I'm afraid you cannot specify which IP address you want to use for health monitoring. It will use the non-floating self-IP address for the egress VLAN that's determined by the routing table.

 

I have seen examples of people using an external monitor and using netcat to define the source IP address.

 

I have also seen examples of people suggesting to create a virtual server made for monitoring, and then applying a SNAT pool on that virtual server. Then create a custom monitor with an alias address and port of the monitor virtual server so traffic passes through it and get SNATed. But I have never tried it myself.

 

I hope this gives some clarification and assistance.