For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

sam_111661's avatar
sam_111661
Icon for Nimbostratus rankNimbostratus
Jan 21, 2008

can a node connect to it's VIP in version 4?

This virtual server is ENABLED -- a.b.c.d:25   Pool: pool_name   This node is UP. -- Total Connections: 6003589 1.1.1.1:25   This node is UP. -- Total Connections: 5928724 1.1.1.2:25   Th...
config
design
Deb_Allen_18's avatar
Deb_Allen_18
Historic F5 Account
Jan 22, 2008
That connection would need to be SNAT'd, since the response from the server to which the request is LB would go back to the server making the request without traversing the BIG-IP to reverse the destination address change: Request comes from 1.1.1.1 bound for a.b.c.d:25, is LB to 1.1.1.x. Without SNAT, source address is still 1.1.1.1, destination is now 1.1.1.x. 1.1.1.x replies directly to 1.1.1.1, who was expecting a reply from a.b.c.d instead, so the connection fails.

 

 

HTH

 

/deb