For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Raymond_Feng_97's avatar
Raymond_Feng_97
Historic F5 Account
May 10, 2007

can I snat all the outbound traffic to be one special source port?

Hi, All   I need to write one irules . There is one UDP VS 200.1.1.1:5060 to load balance two serverA and ServerB, I need to write one irules , snat serverA and ServerB outgoing traffic to use...
application delivery
dev
devops
iRules
Raymond_Feng_97's avatar
Raymond_Feng_97
Historic F5 Account
May 14, 2007
No solutions? Radware can do these!!! This will cause F5 lose all china mobile SIP application!

 

Let me explain the application :

 

China Mobile standard asked the both client and server need to use port 5060 as the source port.So that means, all the traffic no matter from clientA to proxy SIP server or from SIP server to ClientB, will use 5060 as source port and destination port. When we do SIP proxy load balance, the SIP proxy server outbound invite clientB message will be SNAT to virtual server address, BUT our LTM can't keep the source port to be 5060 if all the servers use 5060 as source port. Radware SIP solution by now can support that function.

 

 

Somebody will ask why must use 5060 as source port, just because this standard can pass through all the Firewall and can allow both sip client and sip proxy behind any firewall NAT.

 

 

My question is, is there any avialable solution for our LTM to support that?